CVE-2017-1375

Published: Oct 24, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868.

Affected (2)

Products: Ibm: Storwize Unified V7000 Software

Ibm

1 product

Storwize Unified V7000 Software

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Storwize Unified V7000 Software	Version 1.5
Ibm Storwize Unified V7000 Software	Version 1.6

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (6)

http://www.ibm.com/support/docview.wss?uid=ssg1S1010657

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/101561

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/126868

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www.ibm.com/support/docview.wss?uid=ssg1S1010657

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/101561

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/126868

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.