First published: Mon Jul 27 2020(Updated: )
IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174803.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM InfoSphere Guardium z/OS | =10.5 | |
IBM InfoSphere Guardium z/OS | =10.6 | |
IBM InfoSphere Guardium z/OS | =11.1 | |
IBM InfoSphere Guardium z/OS | <=10.5 | |
IBM InfoSphere Guardium z/OS | <=10.6 | |
IBM InfoSphere Guardium z/OS | <=11.0 | |
IBM InfoSphere Guardium z/OS | <=11.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-4185 is classified as a high severity vulnerability due to its potential to allow attackers to decrypt sensitive information.
To fix CVE-2020-4185, apply the appropriate patches provided by IBM for the affected versions of Security Guardium.
CVE-2020-4185 affects IBM Security Guardium versions 10.5, 10.6, and 11.1.
CVE-2020-4185 is a cryptographic vulnerability that uses weaker than expected algorithms.
No, CVE-2020-4185 is not present in the latest version of IBM Security Guardium following the application of security patches.