Description
The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack.
References
- taddm-weak-ssl(80354) vdb-entry
- IV32391 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21626029