CVE-2014-0897

Published: Aug 29, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.

Affected (4)

Products: Ibm: Flex System Manager

1 product

Flex System Manager

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Flex System Manager	Version 1.2.0
Ibm Flex System Manager	Version 1.2.1
Ibm Flex System Manager	Version 1.3.0
Ibm Flex System Manager	Version 1.3.1

Related CWEs

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824

Source: psirt@us.ibm.com

http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/91395

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/91395

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.