CVE-2021-20566 — Use of a Broken or Risky Cryptographic Algorithm in IBM Resilient Soar

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm5 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 75.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Resilient SoarIBM Resilient Security Orchestration Automation AND Response
Timeline
PublishedJun 16
Latest updateMar 6

Description

IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/resilient_soar38

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

4
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities↗2023-03-06
▶
OSV
linux-aws vulnerabilities↗2023-02-23
▶
GHSA
GHSA-h83r-q9jr-5cxw: IBM Resilient SOAR V38↗2022-05-24
▶
CVEList
CVE-2021-20566: IBM Resilient SOAR V38↗2021-06-16
▶
CVE-2021-20566 — IBM Resilient Soar vulnerability | cvebase