PT-2018-13292 · Ibm · Ibm Multi-Cloud Data Encryption

Chris Shepherd + 5 · Published 2018-10-02 · Updated 2019-10-09 · CVE-2018-1593

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Multi-Cloud Data Encryption (MDE) version 2.1

Description The issue is related to missing file checksums, which could allow an unauthorized user to manipulate data.

Recommendations For IBM Multi-Cloud Data Encryption (MDE) version 2.1, consider implementing additional integrity checks to ensure data authenticity until a patch is available.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2018-1593

Affected Products

Ibm Multi-Cloud Data Encryption

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1593 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1593 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/143568 · Vendor Advisory
• https://www-01.ibm.com/support/docview.wss?uid=swg22016681 · Vendor Advisory