Weak Cryptographic Algorithms in IBM DataPower Gateway
CVE-2020-4831

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Datapower Gateway
Vendor
CVE Published:
12 March 2021

Summary

IBM DataPower Gateway versions 10.0.0.0 through 10.0.1.0 are impacted by a vulnerability related to the use of weak cryptographic algorithms. This flaw could potentially enable attackers to decrypt sensitive information, jeopardizing the confidentiality of critical data. Users of affected versions should seek to implement security patches or updates provided by IBM to mitigate this risk.

Affected Version(s)

DataPower Gateway 10.0.0.0

DataPower Gateway 10.0.1.0

References

https://www.ibm.com/support/pages/node/6398744
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/189965
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.