Lucene search

IbmCVE-2023-27557

HistoryApr 28, 2023 - 2:15 a.m.

CVE-2023-27557

2023-04-2802:15:08

CWE-327

ibm

web.nvd.nist.gov

ibm

counter fraud management

safer payments

cve-2023-27557

nvd

x-force id: 249192

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 through 6.4.2.01, and 6.5.0.00 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 249192.

Affected configurations

Nvd

Vulners

Node

ibmsafer_paymentsRange6.1.0.00–6.1.1.03

ibmsafer_paymentsRange6.2.0.00–6.2.2.03

ibmsafer_paymentsRange6.3.0.00–6.3.1.03

ibmsafer_paymentsRange6.4.0.00–6.4.2.02

ibmsafer_paymentsMatch6.5.0.00

VendorProductVersionCPE
ibmsafer_payments*cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*
ibmsafer_payments6.5.0.00cpe:2.3:a:ibm:safer_payments:6.5.0.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	safer_payments	*	cpe:2.3:a:ibm:safer_payments::::::::
ibm	safer_payments	6.5.0.00	cpe:2.3:a:ibm:safer_payments:6.5.0.00:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Safer Payments",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "6.1.1.02",
        "status": "affected",
        "version": "6.1.0.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "6.2.2.02",
        "status": "affected",
        "version": "6.2.0.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "6.3.1.02",
        "status": "affected",
        "version": "6.3.0.00",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "6.4.2.01",
        "status": "affected",
        "version": "6.4.0.00",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.5.0.00"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/249192

www.ibm.com/support/pages/node/6985603

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

Related for CVE-2023-27557