CVE-2020-10377

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

Design/Logic Flaw

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

PT-2020-10750

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9.0 Description An issue was discovered that leads to local information disclosure due to weak encryption. The affected devices are LG mobile devices with Android OS 9.0, specifically those with Qualcomm SDM45...

CVE-2020-10377: Use of a Broken or Risky Cryptographic Algorithm

A weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system with compromised user credentials...

PT-2020-12047

Name of the Vulnerable Software and Affected Versions Mitel MiVoice Connect Client versions prior to 214.100.1214.0 Description A weak encryption issue could allow an unauthenticated attacker to gain access to user credentials. A successful exploit could allow an attacker to access the system wit...

IBM Resilient Information Disclosure Vulnerability

IBM Resilient is a suite of incident response platforms from IBM in the United States. The platform supports functions such as incident response process orchestration and incident management. A security vulnerability exists in versions prior to IBM Resilient v35.2, which stems from the program's...

GnuTLS Encryption Problem Vulnerability

GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. An encryption issue vulnerability exists in versions prior to GnuTLS 3.6.13. The vulnerability stems from a network system or product that does not properly use the relevant cryptographic algorithms,...

RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP2 (RHSA-2020:1337)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1337 advisory. This release adds the new Apache HTTP Server 2.4.37 Service Pack 2 packages that are part of the JBoss Core Services offering. This...

IBM Spectrum Scale Encryption Issue Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM API Connect weak encryption vulnerability (CNVD-2020-17503)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. A weak encryption vulnerability exists in IBM API Connect versions V5.0.0.0 through 5.0.8.7iFix3...

Belden Hirschmann Network Switches Man-in-the-Middle

The vulnerability of web interfaces of network switches from Belden Hirschmann, series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS, is related to weak encryption. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” attack...

CVE-2019-9095

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access...

Design/Logic Flaw

An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access...

CVE-2019-9095

CVE-2019-9095 affects Moxa MGate MB31xx/MB32xx/MB36xx/MB3180 gateways. The vulnerability arises from use of a broken or risky cryptographic algorithm that may allow an attacker to intercept weakly encrypted passwords and gain administrative access. Affected firmware versions include MB3170/MB3270...

SAP Marketing CRM XSS

The vulnerability of the SAP Marketing CRM system exists due to deficiencies in the encryption of data entered by users. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks remotely...

Weak Encryption Algorithm Vulnerability in Multiple Moxa Products

Moxa MB3170/MB3270/MB3180/MB3280/MB3480/MB3660 series is an advanced Ethernet gateway device manufactured by moxa Taiwan. Weak encryption algorithm vulnerability in multiple Moxa products can be exploited by attackers to obtain sensitive information...

IBM QRadar Advisor With Watson App Information Disclosure Vulnerability

IBM QRadar Advisor with Watson is a suite of security threat analysis solutions from IBM USA. The product includes features such as security threat response and threat probing. A security vulnerability exists in the IBM QRadar Advisor With Watson App versions 1.1 through 2.5, which stems from the...

CVE-2019-4557: Inadequate Encryption Strength

IBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 166206...

IBM Security Secret Server Encryption Issue Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. An encryption issue vulnerability exists in IBM Security Secret Server. The...

IBM Security Directory Server Weak Encryption Algorithm Security Vulnerability

IBM Security Directory Server is a key component of enterprise-class directory infrastructure and unified identity management. IBM Security Directory Server version 6.4.0 uses a weak encryption algorithm and has a security vulnerability in its implementation that could be exploited by an attacker...