Описание
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.
Ссылки
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:traditional:*:*:*
cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:traditional:*:*:*
Одно из
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:z\/os:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
EPSS
Процентиль: 35%
0.00146
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-327
CWE-327
Связанные уязвимости
CVSS3: 7.5
github
около 3 лет назад
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.
EPSS
Процентиль: 35%
0.00146
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-327
CWE-327