Code injection

2016-02-1502:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.8%

JSON

The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the set of MAC algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

CPENameOperatorVersion
security_access_manager_9.0_firmwareeq9.0.0
security_access_manager_for_web_7.0_firmwareeq7.0.0.7
security_access_manager_for_web_7.0_firmwareeq7.0.0.2
security_access_manager_for_web_7.0_firmwareeq7.0.0.11
security_access_manager_for_web_7.0_firmwareeq7.0.0.12
security_access_manager_for_web_7.0_firmwareeq7.0.0.15
security_access_manager_for_web_7.0_firmwareeq7.0.0.4
security_access_manager_for_web_7.0_firmwareeq7.0.0.14
security_access_manager_for_web_7.0_firmwareeq7.0.0.13
security_access_manager_for_web_7.0_firmwareeq7.0.0.5

Name	Operator	Version
security_access_manager_9.0_firmware	eq	9.0.0
security_access_manager_for_web_7.0_firmware	eq	7.0.0.7
security_access_manager_for_web_7.0_firmware	eq	7.0.0.2
security_access_manager_for_web_7.0_firmware	eq	7.0.0.11
security_access_manager_for_web_7.0_firmware	eq	7.0.0.12
security_access_manager_for_web_7.0_firmware	eq	7.0.0.15
security_access_manager_for_web_7.0_firmware	eq	7.0.0.4
security_access_manager_for_web_7.0_firmware	eq	7.0.0.14
security_access_manager_for_web_7.0_firmware	eq	7.0.0.13
security_access_manager_for_web_7.0_firmware	eq	7.0.0.5