CVE-2014-0848
First published: Wed Mar 26 2014(Updated: )
The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Netezza Performance Portal | =2.0.0.0 | |
| IBM Netezza Performance Portal | =2.0.0.1 | |
| IBM Netezza Performance Portal | =2.0.0.2 | |
| IBM Netezza Performance Portal | =2.0.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/author
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/ibm
- canonical/ibm netezza performance portal
- version/ibm netezza performance portal/2.0.0.0
- version/ibm netezza performance portal/2.0.0.1
- version/ibm netezza performance portal/2.0.0.2
- version/ibm netezza performance portal/2.0.0.3