Skip to content
OpenAdvisories
Medium · 5.9 CVE-2019-4399 EUVD-2019-14006GHSA-fjgm-pj6m-hwxx

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an a…

Published Oct 25, 2019 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 162260.

Affected products

VendorProductAffectedFixed
IBM Cloud Orchestrator 2.4, 2.4.0.1, 2.4.0.2, 2.5, 2.5.0.1, 2.4.0.3, 2.5.0.2, 2.4.0.4, 2.5.0.3, 2.5.0.4, 2.4.0.5, 2.5.0.5, 2.5.0.6, 2.5.0.7, 2.5.0.8, 2.5.0.9 —

References