CVE-2021-20400

CVE-2021-20400 affects IBM QRadar SIEM 7.3.x and 7.4.x. The IBM bulletin and NVD entry state the issue stems from weaker-than-expected cryptographic algorithms, potentially allowing an attacker to decrypt highly sensitive information. Affected products/versions include QRadar SIEM 7.3.0–7.3.3 Fix...

CVE-2021-20400

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074...

Code injection

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508...

EdgeX Foundry 加密问题漏洞

EdgeX Foundry is an open source project to build a common open framework for IoT edge computing. A cryptographic issue vulnerability exists in EdgeX's Functions SDK that allows an attacker to decrypt messages via unspecified vectors...

CVE-2021-38984

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793...

CVE-2021-38984

CVE-2021-38984 affects IBM Security Key Lifecycle Manager / IBM Security Guardium Key Lifecycle Manager (TKLM) with weaker-than-expected encryption allowing decryption of sensitive data. Affected: TKLM 3.0 (3.0.0.4 and 3.0.1.x up to 3.0.1.5), TKLM 4.0 (up to 4.0.0.3), GKLM 4.1 (4.1.0–4.1.0.1 and ...

Qualcomm 多款组件加密问题漏洞

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU.MDM9607 is a central processing unit CPU.MDM9640 is a central processing unit CPU.MDM9650 is a central processing unit CPU.MSM8996AU is a central processing unit CPU.QCA6574AU is a central...

Bosch Rexroth IndraMotion Mlc has an unspecified vulnerability

Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robotics control.A security vulnerability exists in Bosch Rexroth IndraMotion Mlc, which stems from a network system or product that does not properly use the relevant cryptographic algorithms, and...

CVE-2021-38925

IBM Sterling B2B Integrator Standard Edition vulnerable to CVE-2021-38925 due to weaker cryptographic algorithms that could allow decryption of highly sensitive information. Affected versions: 5.2.0.0–6.0.3.4 and 6.1.0.0–6.1.0.3. Remediation: upgrade to 6.0.3.5 or 6.1.1.0 (per IBM bulletin). No w...

CVE-2021-29894

IBM Cloud Pak for Security CP4S 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320...

Code injection

IBM Cloud Pak for Security CP4S 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320...

CVE-2021-29894

IBM Cloud Pak for Security CP4S 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320...

Ping Identity PingFederate 加密问题漏洞

Ping Identity PingFederate is a flagship software-based federation server in the United States. for identity management. A cryptographic issue vulnerability exists in Ping Identity PingFederate that stems from the mishandling of certain aspects of external password management by the Authenticatio...

Code injection

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which originates from a cryptographic decryption class vulnerability in a component of Huawei HarmonyOS...

CVE-2021-29722

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095...

CVE-2021-29723

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100...

CVE-2021-29723

CVE-2021-29723 concerns IBM Sterling Secure Proxy/Sterling Proxy vulnerabilities where several releases (IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2) use weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. The conn...

CVE-2021-29722

CVE-2021-29722 affects IBM Sterling Secure Proxy components: 2.4.3.2, 3.4.3.2, 6.0.1, and 6.0.2. The root cause is use of weaker cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Evidence from multiple sources (NVD entry and IBM security bulletins) con...

JetBrains TeamCity Encryption Issue Vulnerability

Jetbrains JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build issue analysis reports. A cryptographic issue vulnerability exists in...