CVE-2018-1946

Summary

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 153388.

Affected Software

VendorProductVersion RangeStatus
IBMSecurity Identity Governance and Intelligence5.2affected
IBMSecurity Identity Governance and Intelligence5.2.1affected
IBMSecurity Identity Governance and Intelligence5.2.2affected
IBMSecurity Identity Governance and Intelligence5.2.2.1affected
IBMSecurity Identity Governance and Intelligence5.2.3affected
IBMSecurity Identity Governance and Intelligence5.2.3.1affected
IBMSecurity Identity Governance and Intelligence5.2.3.2affected
IBMSecurity Identity Governance and Intelligence5.2.4affected
IBMSecurity Identity Governance and Intelligence5.2.4.1affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References