PT-2021-18479 · Ibm · Ibm Tivoli Netcool Impact

Published 2021-07-12 · Updated 2022-07-12 · CVE-2021-29794

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/Impact versions 7.1.0.20 through 7.1.0.21

Description The issue is related to an insecure SSH server configuration that enables weaker than expected cryptographic algorithms. This could allow an attacker to decrypt highly sensitive information.

Recommendations For versions 7.1.0.20 and 7.1.0.21, consider updating the SSH server configuration to disable weaker cryptographic algorithms until a patch is available. As a temporary workaround, restrict access to sensitive information to minimize the risk of exploitation.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2021-29794

Affected Products

Ibm Tivoli Netcool Impact

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/203556 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29794 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29794 · Vendor Advisory
• https://ibm.com/support/pages/node/6469953 · Vendor Advisory