Weak Cryptographic Algorithms in IBM Cloud Pak for Applications
CVE-2021-20360

5.9MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
13 July 2021

Summary

IBM Cloud Pak for Applications 4.3 employs inadequate cryptographic algorithms, compromising the confidentiality of sensitive information. This vulnerability allows attackers to potentially decrypt data that is intended to be protected, raising concerns about data security within cloud applications. Organizations utilizing this product should evaluate their security measures and apply necessary updates to mitigate the associated risks.

Affected Version(s)

Cloud Pak for Applications 4.3

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.