Weak Cryptographic Algorithms in IBM UrbanCode Deploy Software
CVE-2021-39082

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Urbancode Deploy
Vendor
CVE Published:
29 April 2022

Summary

IBM UrbanCode Deploy 7.1.1.2 implements cryptographic algorithms that are weaker than expected, potentially enabling attackers to decrypt sensitive information. This vulnerability poses significant risks as it may allow unauthorized access to confidential data, thereby compromising data integrity and security.

Affected Version(s)

UrbanCode Deploy 7.0.5.2

UrbanCode Deploy 7.1.0.0

UrbanCode Deploy 7.1.1.0

References

https://www.ibm.com/support/pages/node/6576179
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/215693
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.