SB2024041819 - Use of a broken or risky cryptographic algorithm in IBM Tivoli Composite Application Manager for Application Diagnostics



SB2024041819 - Use of a broken or risky cryptographic algorithm in IBM Tivoli Composite Application Manager for Application Diagnostics

Published: April 18, 2024

Security Bulletin ID SB2024041819
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use of a broken or risky cryptographic algorithm (CVE-ID: CVE-2023-50313)

The vulnerability allows an attacker in adjacent network to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. An attacker in adjacent network can gain unauthorized access to sensitive information on the system.


Remediation

Install update from vendor's website.