Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMA2B46117E508F40FE333DBEA962A3B5224FBB63AA3AA2F73C01BB59B016A3261
HistoryMay 16, 2022 - 11:32 a.m.

Security Bulletin: OpenSSL (Publicly disclosed vulnerability)

2022-05-1611:32:32
www.ibm.com
31
ibm mobilefirst foundation
openssl
publicly disclosed vulnerability
version 8.0.0.0
ios native sdk
android native sdk
cordova sdk

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.006

Percentile

78.8%

JSON

Summary

IBM MobileFirst Platform Foundation has addressed the following vulnerability by updating the version of OpenSSL.

Vulnerability Details

CVEID:CVE-2021-4160
**DESCRIPTION:**OpenSSL could provide weaker than expected security, caused by a carry propagation flaw in the MIPS32 and MIPS64 squaring procedure. An attacker could exploit this vulnerability to launch further attacks on the system
CVSS Base score: 6.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/218394 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
IBM MobileFirst Foundation 8.0.0.0

Remediation/Fixes

Published artifacts with the fix

iOS Native SDK - 8.0.2022050611

Android Native SDK - 8.0.2022042909
Cordova SDK - 8.0.2022050908

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmmobilefirst_platform_foundationMatch8.0.0.0
VendorProductVersionCPE
ibmmobilefirst_platform_foundation8.0.0.0cpe:2.3:a:ibm:mobilefirst_platform_foundation:8.0.0.0:*:*:*:*:*:*:*

Related

ibm 25
githubexploit 1
cbl_mariner 3
photon 6
nessus 24
veracode 1
openvas 12
osv 2
debiancve 1
f5 1
freebsd 1
cvelist 1
nvd 1
redhatcve 1
openssl 1
prion 1
ubuntucve 1
thn 1
debian 1
vulnrichment 1
cve 1
gentoo 1
ics 1
oracle 2
avleonov 1
ibm
ibm
Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2021-4160
2022-05-12 15:35:39
Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise & IBM Integration Bus (CVE-2021-4160)
2022-05-12 14:52:32
Security Bulletin: IBM MQ for HPE NonStop Server is affected by OpenSSL vulnerability CVE-2021-4160
2022-07-11 15:35:28
githubexploit
githubexploit
Exploit for Vulnerability in Openssl
2023-09-11 10:42:41
cbl_mariner
cbl_mariner
CVE-2021-4160 affecting package openssl for versions less than 1.1.1k-13
2022-04-26 20:16:58
CVE-2021-4160 affecting package openssl 1.1.1k-16
2021-09-09 15:02:55
CVE-2021-4160 affecting package edk2 for versions less than 20240223gitedc6681206c1-2
2024-07-22 23:01:50
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0165
2022-03-23 00:00:00
Moderate Photon OS Security Update - PHSA-2022-4.0-0165
2022-03-23 00:00:00
Important Photon OS Security Update - PHSA-2022-0368
2022-03-04 00:00:00
nessus
nessus
Photon OS 4.0: Openssl PHSA-2022-4.0-0165
2024-07-23 00:00:00
Photon OS 3.0: Nxtgn PHSA-2022-3.0-0372
2024-07-25 00:00:00
Photon OS 3.0: Openssl PHSA-2022-3.0-0368
2024-07-24 00:00:00
veracode
veracode
Denial Of Service
2022-02-08 22:37:53
openvas
openvas
OpenSSL: BN_mod_exp may produce incorrect results on MIPS (CVE-2021-4160) - Linux
2022-01-31 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2022-1612)
2022-05-05 00:00:00
Debian: Security Advisory (DSA-5103-1)
2022-03-16 00:00:00
osv
osv
CVE-2021-4160
2022-01-28 22:15:15
openssl - security update
2022-03-15 00:00:00
debiancve
debiancve
CVE-2021-4160
2022-01-28 22:15:15
f5
f5
K30184101 : OpenSSL Vulnerability CVE-2021-4160
2022-03-31 00:00:00
freebsd
freebsd
OpenSSL -- BN_mod_exp incorrect results on MIPS
2022-01-28 00:00:00
cvelist
cvelist
CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS
2022-01-28 21:28:41
nvd
nvd
CVE-2021-4160
2022-01-28 22:15:15
redhatcve
redhatcve
CVE-2021-4160
2022-01-31 17:57:31
openssl
openssl
Vulnerability in OpenSSL - BN_mod_exp may produce incorrect results on MIPS
2022-01-28 00:00:00
prion
prion
Design/Logic Flaw
2022-01-28 22:15:00
ubuntucve
ubuntucve
CVE-2021-4160
2022-01-28 00:00:00
thn
thn
New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers
2022-03-16 13:52:00
debian
debian
[SECURITY] [DSA 5103-1] openssl security update
2022-03-15 16:56:11
vulnrichment
vulnrichment
CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS
2022-01-28 21:28:41
cve
cve
CVE-2021-4160
2022-01-28 22:15:15
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2022-10-16 00:00:00
ics
ics
Siemens SINEC INS
2022-09-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.006

Percentile

78.8%

JSON
Related for A2B46117E508F40FE333DBEA962A3B5224FBB63AA3AA2F73C01BB59B016A3261
ibm25githubexploit1cbl_mariner3photon6nessus24veracode1openvas12osv2debiancve1f51freebsd1cvelist1nvd1redhatcve1openssl1prion1ubuntucve1thn1debian1vulnrichment1cve1gentoo1ics1oracle2avleonov1