medium4.3
CVE-2013-4030
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easie…
Impact
Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Integrated Management Module 2 | Versions 1.00, 2.00 |
| Ibm | Bladecenter | Versions hs23, hs23e |
| Ibm | Flex System Manager Node 7955 | All versions |
| Ibm | Flex System Manager Node 8731 | All versions |
| Ibm | Flex System Manager Node 8734 | All versions |
| Ibm | Flex System X220 Compute Node | All versions |
| Ibm | Flex System X240 Compute Node | All versions |
| Ibm | Flex System X440 Compute Node | All versions |
| Ibm | System X Idataplex Direct Water Cooled Dx360 M4 Server | All versions |
| Ibm | System X Idataplex Dx360 M4 Server | All versions |
| Ibm | System X3100 M4 | All versions |
| Ibm | System X3250 M4 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86068
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and_flex_systems_cve_2013_40301
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86068