PT-2020-9373 · Fujitsu · Systemwalker Desktop Keeper+18

Published

2020-02-07

·

Updated

2020-02-27

·

CVE-2019-13163

CVSS v3.1

5.9

Medium

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Interstage Application Development Cycle Manager versions prior to the fixed version Interstage Application Server versions prior to the fixed version Interstage Business Application Manager versions prior to the fixed version Interstage Information Integrator versions prior to the fixed version Interstage Job Workload Server version 8 Interstage List Works versions prior to the fixed version Interstage Studio versions prior to the fixed version Interstage Web Server Express version 11 Linkexpress version 5 Safeauthor version 3 ServerView Resource Orchestrator version 3 Systemwalker Cloud Business Service Management version 1 Systemwalker Desktop Keeper version 15 Systemwalker Desktop Patrol version 15 Systemwalker IT Change Manager version 14 Systemwalker Operation Manager versions prior to the fixed version Systemwalker Runbook Automation versions prior to the fixed version Systemwalker Security Control version 1 Systemwalker Software Configuration Manager version 15
Description: The Fujitsu TLS library is affected by an issue that allows a man-in-the-middle attack. This issue affects various Fujitsu products.
Recommendations: For Interstage Application Development Cycle Manager, update to a version that includes the fix for the TLS library issue. For Interstage Application Server, update to a version that includes the fix for the TLS library issue. For Interstage Business Application Manager, update to a version that includes the fix for the TLS library issue. For Interstage Information Integrator, update to a version that includes the fix for the TLS library issue. For Interstage Job Workload Server version 8, update to a version that includes the fix for the TLS library issue. For Interstage List Works, update to a version that includes the fix for the TLS library issue. For Interstage Studio, update to a version that includes the fix for the TLS library issue. For Interstage Web Server Express version 11, update to a version that includes the fix for the TLS library issue. For Linkexpress version 5, update to a version that includes the fix for the TLS library issue. For Safeauthor version 3, update to a version that includes the fix for the TLS library issue. For ServerView Resource Orchestrator version 3, update to a version that includes the fix for the TLS library issue. For Systemwalker Cloud Business Service Management version 1, update to a version that includes the fix for the TLS library issue. For Systemwalker Desktop Keeper version 15, update to a version that includes the fix for the TLS library issue. For Systemwalker Desktop Patrol version 15, update to a version that includes the fix for the TLS library issue. For Systemwalker IT Change Manager version 14, update to a version that includes the fix for the TLS library issue. For Systemwalker Operation Manager, update to a version that includes the fix for the TLS library issue. For Systemwalker Runbook Automation, update to a version that includes the fix for the TLS library issue. For Systemwalker Security Control version 1, update to a version that includes the fix for the TLS library issue. For Systemwalker Software Configuration Manager version 15, update to a version that includes the fix for the TLS library issue.

Fix

Inadequate Encryption Strength

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2019-13163

Affected Products

Interstage Application Development Cycle Manager
Interstage Application Server
Interstage Business Application Manager
Interstage Information Integrator
Interstage Job Workload Server
Interstage List Works
Interstage Studio
Interstage Web Server Express
Linkexpress
Safeauthor
Serverview Resource Orchestrator
Systemwalker Cloud Business Service Management
Systemwalker Desktop Keeper
Systemwalker Desktop Patrol
Systemwalker It Change Manager
Systemwalker Operation Manager
Systemwalker Runbook Automation
Systemwalker Security Control
Systemwalker Software Configuration Manager