PT-2020-18170 · Ibm · Ibm Cloud Pak For Security

Chris Shepherd + 7 · Published 2020-11-30 · Updated 2020-11-30 · CVE-2020-4624

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Security version 1.3.0.1 (CP4S)

Description The issue is related to the use of weaker than expected cryptographic algorithms during negotiation, which could allow an attacker to decrypt sensitive information.

Recommendations For IBM Cloud Pak for Security version 1.3.0.1 (CP4S), consider updating to a version that uses stronger cryptographic algorithms to prevent decryption of sensitive information by an attacker.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2020-4624

Affected Products

Ibm Cloud Pak For Security

References · 4

• https://osv.dev/vulnerability/CVE-2020-4624 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4624 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/185359 · Vendor Advisory
• https://ibm.com/support/pages/node/6372532 · Vendor Advisory