CVE-2021-27761

Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...

CVE-2021-27761

Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...

Code injection

Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...

CVE-2021-27761 HCL BigFix Platform is affected by weak web transport security

Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...

HCL BigFix Platform encryption vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL Technologies HCL BigFix Platform. An...

CVE-2022-28164: Use of a Broken or Risky Cryptographic Algorithm

Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords...

PT-2022-9850

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue concerns weak web transport security, specifically weak TLS, which may allow an attacker to decrypt data using attacks. Recommendations At the moment, there is no informatio...

CVE-2021-27761: Inadequate Encryption Strength

Weak web transport security Weak TLS: An attacker may be able to decrypt the data using attacks...

Nessus Network Monitor < 6.0.0 Multiple Vulnerabilities (TNS-2022-02)

The version of Nessus Network Monitor NNM installed on the remote host is prior to 6.0.0. It is, therefore, affected by multiple vulnerabilities: - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holdin...

python-rsa: bleichenbacher timing oracle attack against RSA decryption

A flaw was found in python-rsa, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality...

CVE-2022-22368

IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 221012...

PT-2022-15395

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.1.0 through 5.1.3.0 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations For IBM...

IBM Spectrum Scale encryption vulnerabilities

IBM Spectrum Scale is a scalable data and file management solution from IBM based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improving security and management efficiency in...

PUB-A-217475903

In TBD of TBD, there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-29856

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

CVE-2022-29856

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

CVE-2021-39082

IBM UrbanCode Deploy UCD 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2022-29856

Automation360 22 contains a hardcoded cryptographic key that enables decryption of exported RPA packages, exposing confidentiality risk for users. The vulnerability stems from a fixed key used in packaging/export workflows, allowing an attacker to decrypt previously exported artifacts. Documented...

PT-2022-19881

Name of the Vulnerable Software and Affected Versions Automation360 version 22 Description A hardcoded cryptographic key in the software allows an attacker to decrypt exported RPA packages. Recommendations For Automation360 version 22, consider removing or regenerating the hardcoded cryptographic...

PT-2022-10880

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy version 7.1.1.2 Description The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations For IBM UrbanCode Deploy versi...