{"id":"CVE-2023-27557","state":"PUBLISHED","title":"IBM Safter Payments information disclosure","description":"IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 through 6.4.2.01, and 6.5.0.00 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  249192.","publishedAt":"2023-04-28T01:35:26.863Z","updatedAt":"2025-01-30T19:33:04.499Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Safer Payments"],"affected":[{"vendor":"IBM","product":"Safer Payments","defaultStatus":"unaffected","versions":[{"version":"6.1.0.00","status":"affected","lessThanOrEqual":"6.1.1.02","versionType":"semver"},{"version":"6.2.0.00","status":"affected","lessThanOrEqual":"6.2.2.02","versionType":"semver"},{"version":"6.3.0.00","status":"affected","lessThanOrEqual":"6.3.1.02","versionType":"semver"},{"version":"6.4.0.00","status":"affected","lessThanOrEqual":"6.4.2.01","versionType":"semver"},{"version":"6.5.0.00","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6985603","https://exchange.xforce.ibmcloud.com/vulnerabilities/249192"],"weaknesses":["CWE-327"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/27xxx/CVE-2023-27557.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-27557","state":"PUBLISHED","datePublished":"2023-04-28T01:35:26.863Z","dateUpdated":"2025-01-30T19:33:04.499Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-03-02T20:39:33.983Z"},"containers":{"cna":{"title":"IBM Safter Payments information disclosure","descriptions":[{"lang":"en","value":"IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 through 6.4.2.01, and 6.5.0.00 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  249192."}],"affected":[{"vendor":"IBM","product":"Safer Payments","defaultStatus":"unaffected","versions":[{"version":"6.1.0.00","status":"affected","lessThanOrEqual":"6.1.1.02","versionType":"semver"},{"version":"6.2.0.00","status":"affected","lessThanOrEqual":"6.2.2.02","versionType":"semver"},{"version":"6.3.0.00","status":"affected","lessThanOrEqual":"6.3.1.02","versionType":"semver"},{"version":"6.4.0.00","status":"affected","lessThanOrEqual":"6.4.2.01","versionType":"semver"},{"version":"6.5.0.00","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6985603","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/249192","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-327","description":"CWE-327 Use of a Broken or Risky Cryptographic Algorithm","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-04-28T01:35:26.863Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6985603","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/249192","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T12:16:35.577Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-30T19:33:00.398789Z","id":"CVE-2023-27557","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-30T19:33:04.499Z"}}]}}}