VULNERABILITY INTELLIGENCE

CVE-2018-1665

CVSS score5.9 MEDIUM

EPSS probability0.97%

CISA KEVNot currently listed

Published2018-12-13

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891.

Weakness classification

CWE-326: Inadequate Encryption Strength

Primary references

psirt@us.ibm.com — Patch, Vendor Advisory
psirt@us.ibm.com — VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — VDB Entry, Vendor Advisory