CVE-2018-1665
5.9
CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
Summary
IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | DataPower Gateway | 7.6.0.0 | affected |
| IBM | DataPower Gateway | 7.6.0.10 | affected |
| IBM | DataPower Gateway | 7.5.2.0 | affected |
| IBM | DataPower Gateway | 7.5.2.17 | affected |
| IBM | DataPower Gateway | 7.5.1.0 | affected |
| IBM | DataPower Gateway | 7.5.1.17 | affected |
| IBM | DataPower Gateway | 7.5.0.0 | affected |
| IBM | DataPower Gateway | 7.7.0.0 | affected |
| IBM | DataPower Gateway | 7.7.1.3 | affected |
| IBM | DataPower Gateway | 7.5.0.18 | affected |
Weaknesses
- Obtain Information
ADP Enrichment
CVE Program Container
Additional References
- http://www.ibm.com/support/docview.wss?uid=ibm10744195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/144891
References
- http://www.ibm.com/support/docview.wss?uid=ibm10744195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/144891
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.