CVE-2020-4778

Katalog CVE

CVSS 7.5 · High EPSS 0,79%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada ibm curam social program management. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.

Rincian

Terbit di NVD

12 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://exchange.xforce.ibmcloud.com/vulnerabilities/189156 vdb entry · advisory vendor
• https://www.ibm.com/support/pages/node/6346575 advisory vendor