Vulnerability in IBM Algo One

CVE-2013-5468

IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.012 (64.6th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Algo_one — versions 4.7.0, 4.7.1, 4.8.0
  • N/a — versions n/a

Weakness classification (CWE)

References