Lucene search

IbmCVE-2023-38730

HistoryAug 27, 2023 - 11:15 p.m.

CVE-2023-38730

2023-08-2723:15:34

CWE-327

ibm

web.nvd.nist.gov

ibm

storage

copy data management

cve-2023-38730

cryptographic algorithms

security vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268.

Affected configurations

Nvd

Vulners

Node

ibmstorage_copy_data_managementRange2.2.0.0–2.2.19.0

VendorProductVersionCPE
ibmstorage_copy_data_management*cpe:2.3:a:ibm:storage_copy_data_management:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	storage_copy_data_management	*	cpe:2.3:a:ibm:storage_copy_data_management::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Spectrum Copy Data Management",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "2.2.19.0",
        "status": "affected",
        "version": "2.2.0.0",
        "versionType": "semver"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/262268

www.ibm.com/support/pages/node/7028841

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Related for CVE-2023-38730