CVE-2017-1224

EPSS 0.14%
Veröffentlicht 19.07.2017 20:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Bigfix Platform Version9.2.6

Ibm ≫ Bigfix Platform Version9.2.7

Ibm ≫ Bigfix Platform Version9.5

Ibm ≫ Bigfix Platform Version9.5.5

Ibm ≫ Bigfix Platform Version9.5.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.14%	0.302

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

http://www.ibm.com/support/docview.wss?uid=swg22005246

Vendor Advisory

http://www.securityfocus.com/bid/99916

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123903

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-1224

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1224

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1224

EUVD