NetBSD 安全特征问题漏洞

NetBSD is an open source Unix-like operating system from the NetBSD Foundation. NetBSD suffers from a security signature issue vulnerability that stems from the use of a weak cryptographic PRNG for the IPv6 slice ID generation algorithm in versions of NetBSD up to 9.2...

Security Bulletin: Miscellaneous security vulnerabilities in IBM Spectrum Copy Data Management

Summary IBM Spectrum Copy Data Management uses weaker than expected cryptographic algorithms, authentication, and password rules. In addition, IBM Spectrum Copy Data Management is vulnerable to execution of arbitrary commands on the system, obtaining sensitive information, and clickjacking...

CVE-2021-39058

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 214617...

CVE-2021-39058

CVE-2021-39058 affects IBM Spectrum Copy Data Management, listing weaker-than-expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Public sources (NVD entry) describe the affected product as IBM Spectrum Copy Data Management 2.2.13 and earlier. T...

CVE-2021-38947

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242...

Security Bulletin: Weak Cryptographic Control Vulnerability Affects IBM Sterling Connect:Direct Web Services (CVE-2021-38891)

Summary IBM Sterling Connect:Direct Web Services used weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. The vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-38891 DESCRIPTION: IBM Sterling Connect:Direct Web...

Design/Logic Flaw

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793...

CVE-2021-38983

The CVE-2021-38983 issue affects IBM Security Key Lifecycle Manager / Tivoli Key Lifecycle Manager (TKLM) versions 3.0, 3.0.1, 4.0, and 4.1, where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. The vulnerability is documented across ...

Design/Logic Flaw

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

CVE-2020-14264

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

CVE-2020-14264

CVE-2020-14264 affects HCL Traveler Companion for iOS, where the vulnerability stems from a weak cryptographic process in the MobileIron AppConnect SDK included by the app. The issue is a crypto-weakness in the iOS environment exposed via the SDK, potentially impacting confidentiality (per CVSS) ...

CVE-2020-14263

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

CVE-2020-14263

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

Design/Logic Flaw

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

CVE-2020-14263

"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...

CVE-2020-14263

CVE-2020-14263 affects HCL Traveler Companion (iOS) via the MobileIron AppConnect SDK. The underlying issue is described as an iOS weak cryptographic process vulnerability, with the CVSS terms indicating HIGH impact to confidentiality (C: HIGH) but no impact on integrity or availability, and with...

CVE-2021-29894

CVE-2021-29894 affects IBM Cloud Pak for Security (CP4S) versions 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0, where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. A remediation is available: upgrade to CP4S 1.8.0.0 following IBM’s upgrad...

Security feature bypass

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

CVE-2021-41096

The CVE-2021-41096 entry concerns the Rucky Android USB HID Rubber Ducky Launch Pad. Affected releases (versions 2.2 and earlier for release builds; 425 and earlier for nightly builds) use a weak cryptographic algorithm (RSA/ECB/PKCS1Padding) for encryption. The issue is addressed in v2.3 for rel...

Security Bulletin: Multiple Vulnerabilities Affect IBM Secure Proxy

Summary There are multiple vulnerabilities in IBM Secure Proxy. IBM Secure Proxy has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-29723 DESCRIPTION: IBM Sterling Secure Proxy uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly...