NetSight
medium5.9

CVE-2018-1665

IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses …

Impact

IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891.

Affected products

VendorProductAffected versions
IbmDatapower Gateway
from 7.5.0.0 through 7.5.0.18
from 7.5.1.0 through 7.5.1.17
from 7.5.2.0 through 7.5.2.17
from 7.6.0.0 through 7.6.0.10
from 7.7.0.0 through 7.7.1.3

Weakness classification

References