CVE-2017-1375: Weak Encryption
Published Oct 24, 2017
·Updated
IBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 126868.
Affected Software
2 affected components
IBM Storwize Unified V7000 Software=1.5
IBM Storwize Unified V7000 Software=1.6
Event History
Oct 24, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1375?
CVE-2017-1375 is considered a high severity vulnerability due to the potential decryption of highly sensitive information.
2
How do I fix CVE-2017-1375?
To fix CVE-2017-1375, upgrade the IBM System Storage Storwize V7000 Unified to a version that utilizes stronger cryptographic algorithms.
3
What systems are affected by CVE-2017-1375?
CVE-2017-1375 affects IBM System Storage Storwize V7000 Unified versions 1.5 and 1.6.
4
What type of vulnerability is CVE-2017-1375?
CVE-2017-1375 is a cryptographic vulnerability that allows for the decryption of sensitive information due to weaker than expected algorithms.
5
Who reported CVE-2017-1375?
CVE-2017-1375 was reported by IBM X-Force as ID 126868.