PT-2018-13292 · Ibm · Ibm Multi-Cloud Data Encryption

Chris Shepherd + 5 · Publicado 2018-10-02 · Atualizado 2019-10-09 · CVE-2018-1593

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Multi-Cloud Data Encryption (MDE) version 2.1

Description The issue is related to missing file checksums, which could allow an unauthorized user to manipulate data.

Recommendations For IBM Multi-Cloud Data Encryption (MDE) version 2.1, consider implementing additional integrity checks to ensure data authenticity until a patch is available.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2018-1593

Produtos afetados

Ibm Multi-Cloud Data Encryption

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1593 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1593 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/143568 · Aviso do Fabricante
• https://www-01.ibm.com/support/docview.wss?uid=swg22016681 · Aviso do Fabricante