CVE-2021-38947 - IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information

Back Back to CVE browser

HIGH

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information

Published Dec 13, 2021

7.5

HIGH

CVSS 3.1

EPSS 0.69%

Description

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242.

Affected products

Vendor IBM Product Spectrum Copy Data Management Default
n/a
- Version
  2.2.13
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Spectrum Copy Data Management

n/a

Version	Status	Constraints
2.2.13	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-326

Inadequate Encryption Strength

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-25384
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/211242
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6525554
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-25384		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/211242		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6525554		x_refsource_CONFIRMPatchVendor Advisory