PT-2025-12815 · Ibm · Ibm Spss Statistics

Published 2025-03-25 · Updated 2025-08-18 · CVE-2024-31896

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SPSS Statistics versions 26.0 through 29.0.2

Description The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information.

Recommendations For versions 26.0 through 29.0.2, update to a version that uses stronger cryptographic algorithms to prevent decryption of sensitive information by attackers.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2024-31896

Affected Products

Ibm Spss Statistics

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-31896 · Security Note
• https://osv.dev/vulnerability/CVE-2024-31896 · Vendor Advisory
• https://t.me/cvedetector/21114 · Telegram Post
• https://ibm.com/support/pages/node/7228971 · Vendor Advisory, Patch
• https://t.me/cveNotify/132719 · Telegram Post
• https://twitter.com/CVEnew/status/1904612449430753521 · Twitter Post
• https://t.me/cvetracker/19900 · Telegram Post