PT-2021-18479
CVE-2021-29794
·
Published
2021-07-12
·
Updated
2022-07-12
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Netcool/Impact versions 7.1.0.20 through 7.1.0.21
Description
The issue is related to an insecure SSH server configuration that enables weaker than expected cryptographic algorithms. This could allow an attacker to decrypt highly sensitive information.
Recommendations
For versions 7.1.0.20 and 7.1.0.21, consider updating the SSH server configuration to disable weaker cryptographic algorithms until a patch is available. As a temporary workaround, restrict access to sensitive information to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾