Lucene search
HistoryAug 27, 2023 - 11:15 p.m.
CVE-2023-38730
ibm
storage
cryptography
vulnerability
attack
sensitive information
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
42.8%
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268.
Affected configurations
Node
ibmstorage_copy_data_managementRange2.2.0.0–2.2.19.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | storage_copy_data_management | * | cpe:2.3:a:ibm:storage_copy_data_management:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-38730 IBM Spectrum Copy Data Management information disclosure
2023-08-27 22:10:11
prion
prion
Design/Logic Flaw
2023-08-27 23:15:00
ibm
ibm
cve
cve
CVE-2023-38730
2023-08-27 23:15:34
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
42.8%
Related for NVD:CVE-2023-38730