CVE-2013-4030

Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-01-21

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Bladecenter (Ibm)
• Flex System Manager Node 7955 (Ibm)
• Flex System Manager Node 8731 (Ibm)
• Flex System Manager Node 8734 (Ibm)
• Flex System X220 Compute Node (Ibm)
• Flex System X240 Compute Node (Ibm)
• Flex System X440 Compute Node (Ibm)
• Integrated Management Module 2 (Ibm)
• System X3100 M4 (Ibm)
• System X3250 M4 (Ibm)
• System X3300 M4 (Ibm)
• System X3500 M2 (Ibm)
• System X3500 M3 (Ibm)
• System X3500 M4 (Ibm)
• System X3530 M4 (Ibm)
• System X3550 M2 (Ibm)
• System X3550 M3 (Ibm)
• System X3550 M4 (Ibm)
• System X3630 M3 (Ibm)
• System X3630 M4 (Ibm)
• System X3630 M4 Hd (Ibm)
• System X3650 M2 (Ibm)
• System X3650 M3 (Ibm)
• System X3650 M4 (Ibm)
• System X3650 M4 Hd (Ibm)
• System X3690 X5 (Ibm)
• System X3750 M4 (Ibm)
• System X3850 X5 (Ibm)
• System X3950 X5 (Ibm)
• System X Idataplex Direct Water Cooled Dx360 M4 Server (Ibm)
• System X Idataplex Dx360 M4 Server (Ibm)

References

• http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_avoiding_weak_ssl_tls_encryption_in_ibm_system_x_and…
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86068