Weak Cryptographic Algorithms in IBM Cloud Pak for Applications
CVE-2021-20360
5.9MEDIUM
Summary
IBM Cloud Pak for Applications 4.3 employs inadequate cryptographic algorithms, compromising the confidentiality of sensitive information. This vulnerability allows attackers to potentially decrypt data that is intended to be protected, raising concerns about data security within cloud applications. Organizations utilizing this product should evaluate their security measures and apply necessary updates to mitigate the associated risks.
Affected Version(s)
Cloud Pak for Applications 4.3
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved