Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Platform Symphony 加密问题漏洞
Vulnerability Description
IBM Platform Symphony是美国IBM公司的一套基于SOA架构的网格计算解决方案。该方案能够在共享网格上运行分布式应用程序以及进行大数据分析,可加速数十个同时运行的应用程序,控制大量可用的计算能力。 IBM Platform Symphony 5.2和6.1.0.1版本中存在加密问题漏洞,该漏洞源于当不同用户安装程序时,使用相同的证书加密密钥。攻击者可通过已知密钥利用该漏洞获取敏感消息。
CVSS Information
N/A
Vulnerability Type
N/A