Design/Logic Flaw

2014-01-2115:17:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.1%

JSON

IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers’ installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key.

CPENameOperatorVersion
platform_symphonyeq6.1.0.1
platform_symphonyeq5.2

CPE	Name	Operator	Version
	platform_symphony	eq	6.1.0.1
	platform_symphony	eq	5.2

References

osvdb.org/102262

www-01.ibm.com/support/docview.wss?uid=isg3T1020528

exchange.xforce.ibmcloud.com/vulnerabilities/88536