CVE-2018-1466

IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1) use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 140397.

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/140397	VDB Entry Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012283	Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012282	Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ssg1S1012263	Vendor Advisory
http://www.securityfocus.com/bid/104349	Third Party Advisory VDB Entry

Configuration 1

cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:spectrum_virtualize_for_public_cloud:*:*:*:*:*:*:*:*

---

Published : 2018-05-17 09:29

Updated : 2020-08-19 07:02

---

NVD link : CVE-2018-1466

Mitre link : CVE-2018-1466

No products.

CWE-326

Inadequate Encryption Strength