Vulnerabilities (CVE)

Filtered by CWE-327
Total 566 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-4778 1 Ibm 1 Curam Social Program Management 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.
CVE-2020-4624 1 Ibm 1 Cloud Pak For Security 2024-11-21 5.0 MEDIUM 5.3 MEDIUM
IBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms during negotiation could allow an attacker to decrypt sensitive information.
CVE-2020-4614 1 Ibm 1 Data Risk Manager 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927.
CVE-2020-4613 1 Ibm 1 Data Risk Manager 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925.
CVE-2020-4596 2 Ibm, Linux 2 Security Guardium Insights, Linux Kernel 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184812.
CVE-2020-4595 2 Ibm, Linux 2 Security Guardium Insights, Linux Kernel 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184819.
CVE-2020-4594 2 Ibm, Linux 2 Security Guardium Insights, Linux Kernel 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184800.
CVE-2020-4452 1 Ibm 1 Api Connect 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM API Connect V2018.4.1.0 through 2018.4.1.11 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 181324.
CVE-2020-4379 1 Ibm 1 Spectrum Scale 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179158.
CVE-2020-4367 1 Ibm 1 Planning Analytics Local 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Planning Analytics Local 2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179001.
CVE-2020-4350 1 Ibm 1 Spectrum Scale 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178424.
CVE-2020-4349 1 Ibm 1 Spectrum Scale 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178423.
CVE-2020-4254 1 Ibm 1 Security Guardium Big Data Intelligence 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 175560.
CVE-2020-4191 2 Ibm, Linux 2 Security Guardium, Linux Kernel 2024-11-21 2.1 LOW 4.4 MEDIUM
IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174852.
CVE-2020-4185 1 Ibm 1 Security Guardium 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174803.
CVE-2020-4174 1 Ibm 1 Security Guardium Insights 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174683.
CVE-2020-4169 1 Ibm 1 Security Guardium Insights 2024-11-21 5.0 MEDIUM 7.5 HIGH
IBM Security Guardium Insights 2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174405.
CVE-2020-3681 1 Qualcomm 1 - 2024-11-21 7.5 HIGH 9.8 CRITICAL
Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recoverable from code.
CVE-2020-36516 2 Linux, Netapp 29 Linux Kernel, Bootstrap Os, Cloud Volumes Ontap Mediator and 26 more 2024-11-21 4.9 MEDIUM 5.9 MEDIUM
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
CVE-2020-36363 1 Amazon 1 Amazon Cloudfront 2024-11-21 7.5 HIGH 9.8 CRITICAL
Amazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers.