Weak Cryptographic Algorithms in IBM Cloud Pak for Applications
CVE-2021-20360

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak For Applications
Vendor
CVE Published:
13 July 2021

What is CVE-2021-20360?

IBM Cloud Pak for Applications 4.3 employs inadequate cryptographic algorithms, compromising the confidentiality of sensitive information. This vulnerability allows attackers to potentially decrypt data that is intended to be protected, raising concerns about data security within cloud applications. Organizations utilizing this product should evaluate their security measures and apply necessary updates to mitigate the associated risks.

Affected Version(s)

Cloud Pak for Applications 4.3

References

https://www.ibm.com/support/pages/node/6471271
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/195031
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.