CVEvulnerability
CVE-2018-1428
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-03-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.2 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-327
Description
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 139073.
Affected configurations
• ibm db2 9.7
• ibm db2 10.1
• ibm db2 10.5
• ibm db2 11.1
Related
Weakness · CWE (1)
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg22013756 Vendor Advisory
- http://www.securityfocus.com/bid/103574 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041012 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/139073 Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22013756 Vendor Advisory
- http://www.securityfocus.com/bid/103574 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041012 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/139073 Third Party Advisory, VDB Entry, Vendor Advisory