CVE-2024-41763Use of a Broken or Risky Cryptographic Algorithm in IBM Engineering Lifecycle Optimization Publishing

Severity
7.5HIGHNVD
CNA5.9
EPSS
0.0%
top 85.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 4

Description

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-g5cm-fp5c-4jfp: IBM Engineering Lifecycle Optimization - Publishing 72025-01-04
CVEList
IBM Engineering Lifecycle Optimization - Publishing information disclosure2025-01-04
CVE-2024-41763 — IBM vulnerability | cvebase