IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.
The product uses a broken or risky cryptographic algorithm or protocol.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/7047071 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/228568 | vdb entry vendor advisory |