SB2024041607 - Use of a broken or risky cryptographic algorithm in IBM Tivoli Netcool/OMNIbus WebGUI



SB2024041607 - Use of a broken or risky cryptographic algorithm in IBM Tivoli Netcool/OMNIbus WebGUI

Published: April 16, 2024

Security Bulletin ID SB2024041607
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use of a broken or risky cryptographic algorithm (CVE-ID: CVE-2023-50313)

The vulnerability allows an attacker in adjacent network to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. An attacker in adjacent network can gain unauthorized access to sensitive information on the system.


Remediation

Install update from vendor's website.