CVE-2014-0897

IBM Flex System Manager 1.2.0.x-1.3.1.x - Authenticated Weak Encryption in Configuration Patterns

Title source: llm
STIX 2.1

Description

The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.

References (3)

Core 3
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/91395

Scores

EPSS 0.0059
EPSS Percentile 44.7%

Details

CWE
CWE-310
Status published
Products (4)
ibm/flex_system_manager 1.2.0
ibm/flex_system_manager 1.2.1
ibm/flex_system_manager 1.3.0
ibm/flex_system_manager 1.3.1
Published Aug 29, 2014
Tracked Since Feb 18, 2026