CVEvulnerability
CVE-2014-0897
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-08-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-310
Description
The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.
Affected configurations
• ibm flex system manager 1.2.0
• ibm flex system manager 1.2.1
• ibm flex system manager 1.3.0
• ibm flex system manager 1.3.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824 www-01.ibm.com
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91395 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824 www-01.ibm.com
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91395 exchange.xforce.ibmcloud.com