CVE-2015-4953 Weak cryptography in n/a
Man-in-the-middle attackers can decrypt traffic due to a weakness in the encryption protocol of IBM BigFix Remote Control.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-4953?
CVE-2015-4953 is a medium-severity vulnerability in n/a, published on 29 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a weakness in its encryption protocol. IBM X-Force ID: 105197.
Weakness: CWE-326
Which versions are affected by CVE-2015-4953?
It affects 1 product.
Products include Ibm Bigfix Remote Control.
How do I fix CVE-2015-4953?
No fix has been published for CVE-2015-4953 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-4953 being exploited?
There is no known exploitation of CVE-2015-4953 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-6q4x-jxmf-pjpx.