CVE-2023-27557

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6.3.1.02, 6.4.0.00 through 6.4.2.01, and 6.5.0.00 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 249192.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-327

Affected software

Vendor	Product	Versions
IBM	Safer Payments	>= 6.1.0.00, <= 6.1.1.02; >= 6.2.0.00, <= 6.2.2.02; >= 6.3.0.00, <= 6.3.1.02; >= 6.4.0.00, <= 6.4.2.01; 6.5.0.00

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/249192VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6985603Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/249192VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6985603Vendor Advisory

Timeline

Published: Apr 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-275587.8IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquot CVE-2023-275597.5IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server ma CVE-2023-27567.2SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.CVE-2023-275607.5Math/PrimeField.php in phpseclib 3.x before 3.0.19 has an infinite loop with composite primefields.CVE-2023-275617.0runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit thi CVE-2023-275626.5The n8n package 0.218.0 for Node.js allows Directory Traversal.CVE-2023-275638.8The n8n package 0.218.0 for Node.js allows Escalation of Privileges.CVE-2023-275647.5The n8n package 0.218.0 for Node.js allows Information Disclosure.CVE-2023-275667.8Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file CVE-2023-275677.5In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel.CVE-2023-275688.8SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm[searchText CVE-2023-275699.8The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.