Lucene search

IbmCVE-2020-4965

HistoryApr 12, 2021 - 6:15 p.m.

CVE-2020-4965

2021-04-1218:15:12

CWE-327

ibm

web.nvd.nist.gov

ibm

jazz team server

cryptographic algorithms

decryption

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.

Affected configurations

Nvd

Vulners

Node

ibmcollaborative_lifecycle_managementMatch6.0.2

ibmcollaborative_lifecycle_managementMatch6.0.6

ibmcollaborative_lifecycle_managementMatch6.0.6.1

ibmdoors_nextMatch7.0.0

ibmdoors_nextMatch7.0.1

ibmdoors_nextMatch7.0.2

ibmengineering_insightsMatch7.0.0

ibmengineering_insightsMatch7.0.1

ibmengineering_insightsMatch7.0.2

ibmengineering_lifecycle_managementMatch7.0.0

ibmengineering_lifecycle_managementMatch7.0.1

ibmengineering_lifecycle_managementMatch7.0.2

ibmengineering_requirements_management_doors_nextMatch6.0.2

ibmengineering_requirements_management_doors_nextMatch6.0.6

ibmengineering_requirements_management_doors_nextMatch6.0.6.1

ibmengineering_test_managementMatch7.0.0

ibmengineering_test_managementMatch7.0.1

ibmengineering_test_managementMatch7.0.2

ibmengineering_workflow_managementMatch7.0.0

ibmengineering_workflow_managementMatch7.0.1

ibmengineering_workflow_managementMatch7.0.2

ibmrational_engineering_lifecycle_managerMatch6.0.2

ibmrational_engineering_lifecycle_managerMatch6.0.6

ibmrational_engineering_lifecycle_managerMatch6.0.6.1

ibmrational_quality_managerMatch6.0.2

ibmrational_quality_managerMatch6.0.6

ibmrational_quality_managerMatch6.0.6.1

ibmrational_team_concertMatch6.0.2

ibmrational_team_concertMatch6.0.6

ibmrational_team_concertMatch6.0.6.1

ibmremovable_media_managementMatch6.0.2

ibmremovable_media_managementMatch6.0.6

ibmremovable_media_managementMatch6.0.6.1

ibmremovable_media_managementMatch7.0.0

ibmremovable_media_managementMatch7.0.1

ibmrhapsody_model_managerMatch6.0.2

ibmrhapsody_model_managerMatch6.0.6

ibmrhapsody_model_managerMatch6.0.6.1

VendorProductVersionCPE
ibmcollaborative_lifecycle_management6.0.2cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*
ibmcollaborative_lifecycle_management6.0.6cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6:*:*:*:*:*:*:*
ibmcollaborative_lifecycle_management6.0.6.1cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6.1:*:*:*:*:*:*:*
ibmdoors_next7.0.0cpe:2.3:a:ibm:doors_next:7.0.0:*:*:*:*:*:*:*
ibmdoors_next7.0.1cpe:2.3:a:ibm:doors_next:7.0.1:*:*:*:*:*:*:*
ibmdoors_next7.0.2cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*
ibmengineering_insights7.0.0cpe:2.3:a:ibm:engineering_insights:7.0.0:*:*:*:*:*:*:*
ibmengineering_insights7.0.1cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*
ibmengineering_insights7.0.2cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*
ibmengineering_lifecycle_management7.0.0cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	collaborative_lifecycle_management	6.0.2	cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.2:::::::*
ibm	collaborative_lifecycle_management	6.0.6	cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6:::::::*
ibm	collaborative_lifecycle_management	6.0.6.1	cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6.1:::::::*
ibm	doors_next	7.0.0	cpe:2.3:a:ibm:doors_next:7.0.0:::::::*
ibm	doors_next	7.0.1	cpe:2.3:a:ibm:doors_next:7.0.1:::::::*
ibm	doors_next	7.0.2	cpe:2.3:a:ibm:doors_next:7.0.2:::::::*
ibm	engineering_insights	7.0.0	cpe:2.3:a:ibm:engineering_insights:7.0.0:::::::*
ibm	engineering_insights	7.0.1	cpe:2.3:a:ibm:engineering_insights:7.0.1:::::::*
ibm	engineering_insights	7.0.2	cpe:2.3:a:ibm:engineering_insights:7.0.2:::::::*
ibm	engineering_lifecycle_management	7.0.0	cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.0:::::::*

Rows per page:

1-10 of 381

CNA Affected

[
  {
    "product": "Rational DOORS Next Generation",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      }
    ]
  },
  {
    "product": "Engineering Test Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      }
    ]
  },
  {
    "product": "Rational Collaborative Lifecycle Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Rational Engineering Lifecycle Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      }
    ]
  },
  {
    "product": "Rational Quality Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Rational Team Concert",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Rational Rhapsody Model Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "6.0.2"
      }
    ]
  },
  {
    "product": "Engineering Workflow Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      }
    ]
  },
  {
    "product": "Engineering Lifecycle Optimization",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.1"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/192422

www.ibm.com/support/pages/node/6441803

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Related for CVE-2020-4965