Lucene search
IBMB4AB4EE1C9D09496B678E634F9925746C5AAE9831AE0835B10CE2A52E77B55D1HistoryApr 24, 2021 - 7:18 a.m.
Security Bulletin: IBM Spectrum Protect Plus allows Weak Cryptographic Algorithms (CVE-2021-29694)
2021-04-2407:18:56
www.ibm.com
5
0.001 Low
EPSS
Percentile
43.8%
Summary
Weak cryptographic algorithms such as 3DES may be used by IBM Spectrum Protect Plus.
Vulnerability Details
CVEID:CVE-2021-29694
**DESCRIPTION:**IBM Spectrum Protect Plus uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Base score: 5.9
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/200258 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Spectrum Protect Plus | 10.1.0-10.1.7 |
Remediation/Fixes
| IBM Spectrum Protect Plus Release | First Fixing VRM Level | APAR** ** | Platform | Link to Fix |
|---|---|---|---|---|
| 10.1 | 10.1.8 | |||
| IT35507 | ||||
| Linux | <https://www.ibm.com/support/pages/node/6415111> |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm spectrum protect plus | eq | 10.1 |
Related
prion
prion
Code injection
2021-04-26 17:15:00
cvelist
cvelist
CVE-2021-29694
2021-04-24 00:00:00
nvd
nvd
CVE-2021-29694
2021-04-26 17:15:08
cve
cve
CVE-2021-29694
2021-04-26 17:15:08
0.001 Low
EPSS
Percentile
43.8%
Related for B4AB4EE1C9D09496B678E634F9925746C5AAE9831AE0835B10CE2A52E77B55D1