PT-2017-13752 · Ibm · Ibm Qradar Network Security

Publicado 2017-09-05 · Atualizado 2019-10-03 · CVE-2017-1491

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar Network Security version 5.4

Description The issue allows interaction between multiple actors to negotiate the algorithm used for protection mechanisms like encryption or authentication. However, it does not select the strongest available algorithm for both parties.

Recommendations For IBM QRadar Network Security version 5.4, consider configuring the system to prioritize the strongest available algorithm for encryption or authentication to mitigate the risk.

Correção

Identificadores relacionados

CVE-2017-1491

Produtos afetados

Ibm Qradar Network Security

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1491 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1491 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=swg22007535 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128689 · Nota