This script is Copyright (C) 2016 Tenable Network Security, Inc.
The remote host is affected by a security feature bypass
According to its self-reported version number, the IBM Storwize server
running on the remote host is affected by a security feature bypass
vulnerability, known as Bar Mitzvah, due to improper combination of
state data with key data by the RC4 cipher algorithm during the
initialization phase. A man-in-the-middle attacker can exploit this,
via a brute-force attack using LSB values, to decrypt the traffic.
Note that Nessus has not tested for this issue but has instead relied
only on the application's self-reported version number.
See also :
Upgrade to IBM Storwize version 22.214.171.124 / 126.96.36.199 / 188.8.131.52 / or later.
Risk factor :
Low / CVSS Base Score : 2.6
CVSS Temporal Score : 2.2
Public Exploit Available : true