CVE-2020-4968

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/192427
• https://www.ibm.com/support/pages/node/6403241 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6403241

Frequently Asked Questions

• What is the vulnerability ID?

  The vulnerability ID is CVE-2020-4968.

• What is the title of the vulnerability?

  The title of the vulnerability is "IBM Security Identity Governance Virtual Appliance uses weaker than expected cryptographic algorithm…".

• What is the description of the vulnerability?

  The vulnerability allows an attacker to decrypt highly sensitive information by exploiting weaker than expected cryptographic algorithms in IBM Security Identity Governance and Intelligence 5.2.6. The IBM X-Force ID for this vulnerability is 192427.

• What software is affected by this vulnerability?

  IBM Security Identity Governance and Intelligence version 5.2.6 is affected.

• What is the severity of this vulnerability?

  The severity of this vulnerability is medium and it has a CVSS score of 6.5.

• How can the vulnerability be fixed?

  To fix this vulnerability, it is recommended to update to a version of IBM Security Identity Governance and Intelligence that uses stronger cryptographic algorithms.

• Where can I find more information about this vulnerability?

  You can find more information about this vulnerability on the IBM X-Force Exchange website (ID: 192427) and the IBM Support website.

• What Common Weakness Enumeration (CWE) ID is associated with this vulnerability?

  The Common Weakness Enumeration (CWE) ID associated with this vulnerability is CWE-327.