Vulnerabilities > Inadequate Encryption Strength

DATE CVE VULNERABILITY TITLE RISK
2018-11-09 CVE-2018-15796 Inadequate Encryption Strength vulnerability in Pivotal Software Bits Service
Cloud Foundry Bits Service Release, versions prior to 2.14.0, uses an insecure hashing algorithm to sign URLs.
network
low complexity
pivotal-software CWE-326
8.1
2018-10-18 CVE-2018-1518 Inadequate Encryption Strength vulnerability in IBM products
IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information.
local
low complexity
ibm CWE-326
5.5
2018-10-05 CVE-2018-0448 Inadequate Encryption Strength vulnerability in Cisco Digital Network Architecture Center
A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and take complete control of identity management functions.
network
low complexity
cisco CWE-326
critical
9.8
2018-10-02 CVE-2018-1593 Inadequate Encryption Strength vulnerability in IBM Multi-Cloud Data Encryption 2.1/2.1.0.1
IBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due to missing file checksums.
network
low complexity
ibm CWE-326
5.3
2018-09-26 CVE-2018-1785 Inadequate Encryption Strength vulnerability in IBM products
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information.
network
low complexity
ibm CWE-326
7.5
2018-09-26 CVE-2018-1545 Inadequate Encryption Strength vulnerability in IBM products
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5
2018-09-18 CVE-2018-17177 Inadequate Encryption Strength vulnerability in Neatorobotics products
An issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices.
low complexity
neatorobotics CWE-326
2.4
2018-08-14 CVE-2018-0131 Inadequate Encryption Strength vulnerability in Cisco IOS and IOS XE
A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session.
network
high complexity
cisco CWE-326
5.9
2018-08-13 CVE-2018-15124 Inadequate Encryption Strength vulnerability in Zipato Zipabox Firmware 118
Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device.
network
low complexity
zipato CWE-326
critical
9.8
2018-08-06 CVE-2017-1366 Inadequate Encryption Strength vulnerability in IBM Security Identity Governance and Intelligence
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
low complexity
ibm CWE-326
7.5