Design/Logic Flaw

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

Researchers Release PoC Exploit for Windows CryptoAPI Bug Discovered by NSA

Proof-of-concept Poc code has been released for a now-patched high-severity security flaw in the Windows CryptoAPI that the U.S. National Security Agency NSA and the U.K. National Cyber Security Centre NCSC reported to Microsoft last year. Tracked as CVE-2022-34689 CVSS score: 7.5, the spoofing...

CVE-2022-22462

CVE-2022-22462 affects IBM Security Verify Governance, Identity Manager virtual appliance component (10.0.1). The issue stems from the use of weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. IBM’s IBM Bulletin confirms the vulne...

CVE-2022-22462 IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

CVE-2022-22462 IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078...

CVE-2022-43917 IBM WebSphere Application Server information disclosure

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045...

CVE-2022-43917

CVE-2022-43917 affects IBM WebSphere Application Server traditional container (versions 8.5 and 9.0). Root cause: use of weaker than expected cryptographic keys in the containerized traditional version, enabling potential information disclosure. Impact per sources: confidentiality may be compromi...

CVE-2022-43917 IBM WebSphere Application Server information disclosure

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045...

PT-2023-12699 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance, Identity Manager virtual appliance component version 10.0.1 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive...

PT-2023-14397 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue is related to the use of weaker than expected cryptographic keys in the traditional container of IBM WebSphere Application Server, which could allow an attacker ...

The vulnerability of the Cryptographic Operating Systems in Windows, which allows a perpetrator to disclose protected information

The vulnerability of Windows Cryptographic Operating Systems is related to the exposure of information. Exploiting this vulnerability can allow a perpetrator to disclose the protected information...

Siemens SCALANCE X Switches Use of Hard-Coded Cryptographic Key (CVE-2020-28391)

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X-200RNA switch family All versions V3.2.7. Devices create a new unique key upon factory reset...

Security Bulletin: IBM WebSphere Application Server traditional container is vulnerable to information disclosure (CVE-2022-43917)

Summary IBM WebSphere Application Server traditional container is vulnerable to information disclosure. This affects only the containerized version of WebSphere Application Server traditional. This has been addressed. Vulnerability Details CVEID:CVE-2022-43917 DESCRIPTION: IBM WebSphere Applicati...

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.

...

The vulnerability of the Cryptographic operating systems in Windows, which allows attackers to enhance their privileges.

The vulnerability of Windows Cryptographic Operating Systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges using specially created data...

PT-2025-40201

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the crypto/xts module where it incorrectly handles EBUSY errors. The module only processes the EINPROGRESS return value, leading to a use-after-free...

The vulnerability of Windows operating system’s Cryptographic Services allows attackers to enhance their privileges.

The vulnerability of Windows operating system-based Cryptographic Services is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system-based Cryptographic Services is related to the exposure of information. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of Windows operating system’s Cryptographic Services allows attackers to enhance their privileges.

The vulnerability of Windows operating system’s Cryptographic Services is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-3738

The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull...