CVEvulnerability
CVE-2015-5012
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the set of MAC algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Affected configurations
• ibm security access manager 9.0 firmware 9.0.0
• ibm security access manager for web 7.0 firmware 7.0.0.1
• ibm security access manager for web 7.0 firmware 7.0.0.2
• ibm security access manager for web 7.0 firmware 7.0.0.3
• ibm security access manager for web 7.0 firmware 7.0.0.4
• ibm security access manager for web 7.0 firmware 7.0.0.5
• ibm security access manager for web 7.0 firmware 7.0.0.6
• ibm security access manager for web 7.0 firmware 7.0.0.7
• ibm security access manager for web 7.0 firmware 7.0.0.8
• ibm security access manager for web 7.0 firmware 7.0.0.9
• ibm security access manager for web 7.0 firmware 7.0.0.10
• ibm security access manager for web 7.0 firmware 7.0.0.11
• ibm security access manager for web 7.0 firmware 7.0.0.12
• ibm security access manager for web 7.0 firmware 7.0.0.13
• ibm security access manager for web 7.0 firmware 7.0.0.14
• ibm security access manager for web 7.0 firmware 7.0.0.15
• ibm security access manager for web 7.0 firmware 7.0.0.16
• ibm security access manager for web 7.0 firmware 7.0.0.17
• ibm security access manager for web 7.0 firmware 7.0.0.18
• ibm security access manager for web 8.0 firmware 8.0.0.1
• ibm security access manager for web 8.0 firmware 8.0.0.2
• ibm security access manager for web 8.0 firmware 8.0.0.3
• ibm security access manager for web 8.0 firmware 8.0.0.5
• ibm security access manager for web 8.0 firmware 8.0.1
• ibm security access manager for web 8.0 firmware 8.0.1.0
• ibm security access manager for web 8.0 firmware 8.0.1.2
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21971422 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21971422 Patch, Vendor Advisory