4.3

CVE-2013-4030

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Bladecenter Versionhs23
Ibm ≫ Bladecenter Versionhs23e
Ibm ≫ System X3100 M4 Version-
Ibm ≫ System X3250 M4 Version-
Ibm ≫ System X3300 M4 Version-
Ibm ≫ System X3500 M2 Version-
Ibm ≫ System X3500 M3 Version-
Ibm ≫ System X3500 M4 Version-
Ibm ≫ System X3530 M4 Version-
Ibm ≫ System X3550 M2 Version-
Ibm ≫ System X3550 M3 Version-
Ibm ≫ System X3550 M4 Version-
Ibm ≫ System X3630 M3 Version-
Ibm ≫ System X3630 M4 Version-
Ibm ≫ System X3630 M4 Hd Version-
Ibm ≫ System X3650 M2 Version-
Ibm ≫ System X3650 M3 Version-
Ibm ≫ System X3650 M4 Version-
Ibm ≫ System X3650 M4 Hd Version-
Ibm ≫ System X3690 X5 Version-
Ibm ≫ System X3750 M4 Version-
Ibm ≫ System X3850 X5 Version-
Ibm ≫ System X3950 X5 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.95% 0.565
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86068