Weak Cryptographic Algorithms in IBM API Connect
CVE-2019-4553
5.9MEDIUM
Summary
IBM API Connect versions 5.0.0.0 through 5.0.8.7iFix3 are affected by a vulnerability that involves the use of weaker than expected cryptographic algorithms. This security flaw could potentially allow unauthorized users to decrypt highly sensitive information, posing a significant risk to data integrity and confidentiality. Organizations using these versions should evaluate their exposure and take appropriate measures to mitigate the risks associated with this vulnerability.
Affected Version(s)
API Connect 5.0.0.0
API Connect 5.0.8.7iFix3
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved