CVE-2021-29722
Severity CVSS v4.0:
Pending analysis
Type:
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
Publication date:
30/08/2021
Last modified:
14/02/2023
Description
IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:ibm:sterling_external_authentication_server:2.4.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_external_authentication_server:6.0.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_secure_proxy:3.4.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_secure_proxy:6.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:sterling_secure_proxy:6.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:ibm:linux_on_ibm_z:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:* |
To consult the complete list of CPE names with products and versions, see this page