CVE-2018-1665

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-12-13 · updated 2026-06-17
Weakness: CWE-326

Description

IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144891.

Affected products

IBM DataPower Gateway 11.0.0: from 7.5.0.0 through 7.5.0.18; from 7.5.1.0 through 7.5.1.17; from 7.5.2.0 through 7.5.2.17; from 7.6.0.0 through 7.6.0.10; from 7.7.0.0 through 7.7.1.3

References

http://www.ibm.com/support/docview.wss?uid=ibm10744195
https://exchange.xforce.ibmcloud.com/vulnerabilities/144891
http://www.ibm.com/support/docview.wss?uid=ibm10744195
https://exchange.xforce.ibmcloud.com/vulnerabilities/144891

Get alerted when CVE-2018-1665 or the next vulnerability affects your stack