IBM Security Bulletin: API Connect is affected by weaker than expected cryptographic algorithm usage vulnerability (CVE-2018-1385)

API Connect has addressed the following vulnerability. IBM API Connect uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVE(s): CVE-2018-1385

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22013051
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138144

The post IBM Security Bulletin: API Connect is affected by weaker than expected cryptographic algorithm usage vulnerability (CVE-2018-1385) appeared first on IBM PSIRT Blog.

Affected API Connect	Affected Versions
IBM API Connect	5.0.0.0-5.0.6.5
IBM API Connect	5.0.7.0-5.0.7.2
IBM API Connect	5.0.8.0-5.0.8.1

from IBM Product Security Incident Response Team http://ift.tt/2EVIx8u