CVE-2014-0848 The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote att...
LowCVSS 3.5
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm netezza performance portal | = 2.0.0.0 | No fix listed |
| ibm netezza performance portal | = 2.0.0.1 | No fix listed |
| ibm netezza performance portal | = 2.0.0.2 | No fix listed |
| ibm netezza performance portal | = 2.0.0.3 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-netezza-cve20140848-weak-sec(90723) vdb-entry