PT-2014-2732
CVE-2013-4030
·
Published
2014-01-21
·
Updated
2017-08-29
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Integrated Management Module (IMM) 2 versions 1.00 through 2.00
Description
The issue allows remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against SSL or TLS traffic, due to the support of SSL cipher suites with short keys.
Recommendations
For Integrated Management Module (IMM) 2 versions 1.00 through 2.00, consider disabling the use of SSL cipher suites with short keys as a temporary workaround until a patch is available. Restrict access to the affected servers to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾