Weak Cryptographic Algorithms in IBM Security Guardium Big Data Intelligence
CVE-2019-4339

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Security Guardium Big Data Intelligence
Vendor
CVE Published:
29 October 2019

Summary

IBM Security Guardium Big Data Intelligence version 4.0 demonstrates vulnerabilities due to the use of weaker-than-expected cryptographic algorithms. These flaws can potentially give attackers the ability to decrypt highly sensitive data, thereby compromising its confidentiality and integrity. Organizations utilizing this software version are advised to review their security posture and apply the necessary remediation measures to safeguard their data against unauthorized access.

Affected Version(s)

Security Guardium Big Data Intelligence 4

References

https://www.ibm.com/support/pages/node/1096924
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/161418
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.