IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225081.
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Security_verify_access | Ibm | 10.0.0.0 (including) | 10.0.0.0 (including) |
Security_verify_access | Ibm | 10.0.1.0 (including) | 10.0.1.0 (including) |
Security_verify_access | Ibm | 10.0.2.0 (including) | 10.0.2.0 (including) |
Security_verify_access | Ibm | 10.0.3.0 (including) | 10.0.3.0 (including) |