CVE-2017-1224

EPSS 0.14%
Published 19.07.2017 20:29:00
Last modified 20.04.2025 01:37:25
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Bigfix Platform Version9.2.6

Ibm ≫ Bigfix Platform Version9.2.7

Ibm ≫ Bigfix Platform Version9.5

Ibm ≫ Bigfix Platform Version9.5.5

Ibm ≫ Bigfix Platform Version9.5.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.14%	0.302

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-326 Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

http://www.ibm.com/support/docview.wss?uid=swg22005246

Vendor Advisory

http://www.securityfocus.com/bid/99916

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/123903

Vendor Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2017-1224

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-1224

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-1224

EUVD