CVE-2024-31896

Published: Mar 25, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM SPSS Statistics 26.0, 27.0.1, 28.0.1, and 29.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected (4)

Products: Ibm: Spss Statistics

Ibm

1 product

Spss Statistics

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Spss Statistics	Version 26.0.0.0
Ibm Spss Statistics	Version 27.0.1.0
Ibm Spss Statistics	Version 28.0.1.0
Ibm Spss Statistics	Version 29.0.2.0

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (1)

https://www.ibm.com/support/pages/node/7228971

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.