CVE-2018-1608

Published: May 1, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 143798.

Affected (1)

Products: Ibm: Rational Engineering Lifecycle Manager

Ibm

1 product

Rational Engineering Lifecycle Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Engineering Lifecycle Manager	From 6.0 to 6.0.6

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (6)

http://www.securityfocus.com/bid/108290

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/143798

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10882778

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/108290

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/143798

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/docview.wss?uid=ibm10882778

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.