CVE Catalog
CVE-2023-38730
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.33%
24th percentile - higher than 24% of all known CVEs
Summary
IBM Storage Copy Data Management versions 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Risk Assessment
The organization may be exposed to the disclosure of confidential data, potentially leading to serious legal and reputational consequences.
Recommendation
It is recommended to upgrade to the latest version of the software that uses stronger cryptographic algorithms.
Original NVD description (English source)
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268.