CVE-2021-38891

Опубликовано: 23 нояб. 2021

Источник: nvd

CVSS3: 5.9

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/209508
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6518582
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/209508
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6518582
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:sterling_connect\:direct:*:*:*:*:*:*:*:*

Версия от 6.0.0 (включая) до 6.2.0.1 (исключая)

Одно из

cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*

EPSS

Процентиль: 27%

0.00096

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-326

Связанные уязвимости

GHSA-h8c3-q762-53jh

github

больше 3 лет назад

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508.

EPSS

Процентиль: 27%

0.00096

Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-326