CVE-2020-4968
First published: Tue Dec 22 2020(Updated: )
IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192427.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Identity Governance and Intelligence | =5.2.6 | |
| IBM Security Identity Governance and Intelligence | <=5.2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-4968.
What is the title of the vulnerability?
The title of the vulnerability is "IBM Security Identity Governance Virtual Appliance uses weaker than expected cryptographic algorithm…".
What is the description of the vulnerability?
The vulnerability allows an attacker to decrypt highly sensitive information by exploiting weaker than expected cryptographic algorithms in IBM Security Identity Governance and Intelligence 5.2.6. The IBM X-Force ID for this vulnerability is 192427.
What software is affected by this vulnerability?
IBM Security Identity Governance and Intelligence version 5.2.6 is affected.
What is the severity of this vulnerability?
The severity of this vulnerability is medium and it has a CVSS score of 6.5.
How can the vulnerability be fixed?
To fix this vulnerability, it is recommended to update to a version of IBM Security Identity Governance and Intelligence that uses stronger cryptographic algorithms.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the IBM X-Force Exchange website (ID: 192427) and the IBM Support website.
What Common Weakness Enumeration (CWE) ID is associated with this vulnerability?
The Common Weakness Enumeration (CWE) ID associated with this vulnerability is CWE-327.
- collector/nvd-index
- collector/ibm-support
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/weakness
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/ibm
- canonical/ibm security identity governance and intelligence
- version/ibm security identity governance and intelligence/5.2.6