Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Integrated_management_module_2 | Ibm | 1.00 (including) | 1.00 (including) |
| Integrated_management_module_2 | Ibm | 2.00 (including) | 2.00 (including) |
References
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86068
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86068