CVE-2014-0897

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-29 · updated 2026-06-17
Weakness: CWE-310

Description

The Configuration Patterns component in IBM Flex System Manager (FSM) 1.2.0.x, 1.2.1.x, 1.3.0.x, and 1.3.1.x uses a weak algorithm in an encryption step during Chassis Management Module (CMM) account creation, which makes it easier for remote authenticated users to defeat cryptographic protection mechanisms via unspecified vectors.

Affected products

IBM Flex System Manager: 1.2.0, 1.2.1, 1.3.0, 1.3.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153
https://exchange.xforce.ibmcloud.com/vulnerabilities/91395
http://www-01.ibm.com/support/docview.wss?uid=swg1IT03824
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096153
https://exchange.xforce.ibmcloud.com/vulnerabilities/91395

Get alerted when CVE-2014-0897 or the next vulnerability affects your stack