Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
CVE-2021-20369: IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361.
CVE-2021-20369 · published 5 years ago
Summary
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361.
What to do
- Update ibm cloud_pak_for_applications to version 4.3.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | cloud_pak_for_applications |
< 4.3.1 cpe:2.3:a:ibm:cloud_pak_for_applications:*:*:*:*:*:*:*:* |
Original advisory text
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361.
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/195361 VDB Entry
- https://www.ibm.com/support/pages/node/6471331 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-326Inadequate Encryption Strength
Timeline
Published13 Jul 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-20369 · NVD
Track software like this
Free during beta