CVE-2020-4624 - IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information

Back Back to CVE browser

MEDIUM

IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information

Published Nov 30, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 0.73%

Description

IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information.

Affected products

Vendor IBM Product Cloud Pak for Security Default
unknown
Affected
- 1.3.0.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
IBM	Cloud Pak for Security	unknown	Affected 1.3.0.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-327

Broken Crypto Algorithm

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25871
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/185359
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6372532
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25871		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/185359		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6372532		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Nov 30, 2020

Updated Sep 17, 2024

Reserved Dec 30, 2019

Link CVE-2020-4624

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-4624

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Nov 30, 2020

Updated Sep 17, 2024

Link EUVD-2020-25871

GitHub

No data