Lucene search
China National Vulnerability DatabaseCNVD-2022-91129HistoryDec 23, 2022 - 12:00 a.m.
IBM Spectrum Control weak encryption vulnerability
2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
ibm
spectrum control
encryption
vulnerability
storage
management
software
international business machines
weak
algorithm
attacker
sensitive information
exploit
decrypt
0.001 Low
EPSS
Percentile
42.2%
IBM Spectrum Control (formerly known as Tivoli Storage Productivity Center) is a suite of storage resource management software from International Business Machines (IBM). IBM Spectrum Control version 5.4 contains a weak encryption vulnerability that stems from the program’s use of a weaker-than-expected encryption algorithm. An attacker could exploit the vulnerability to decrypt highly sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm spectrum control | eq | 5.4 |
Related
cvelist
cvelist
CVE-2022-38391 IBM Spectrum Control information disclosure
2022-12-20 20:31:35
prion
prion
Code injection
2022-12-20 21:15:00
nvd
nvd
CVE-2022-38391
2022-12-20 21:15:10
cve
cve
CVE-2022-38391
2022-12-20 21:15:10
