3.5

CVE-2014-0848

The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Netezza Performance Portal Version 2.0.0.0
Ibm ≫ Netezza Performance Portal Version 2.0.0.1
Ibm ≫ Netezza Performance Portal Version 2.0.0.2
Ibm ≫ Netezza Performance Portal Version 2.0.0.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.534
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21665278
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/90723