CVE-2015-5012

No fix known EPSS 2%

The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0.0 IF1 does not properly restrict the set of MAC algorithms, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

Published 2016-02-15 · CVE record · OSV

Products: ibm security_access_manager_9.0_firmware, ibm security_access_manager_for_web_7.0_firmware, ibm security_access_manager_for_web_8.0_firmware