VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 29, 2014· Updated Jun 17, 2026

CVE-2014-0897

CVE-2014-0897

Description

The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.

Affected products

5
  • IBM/Flex System Manager5 versions
    cpe:2.3:a:ibm:flex_system_manager:1.2.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:flex_system_manager:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:flex_system_manager:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:flex_system_manager:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:flex_system_manager:1.3.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.2.0.x – 1.3.1.x

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.