PT-2017-8264 · Ibm · Ibm Qradar

Chris Shepherd + 6 · Publicado 2017-03-01 · Atualizado 2017-03-04 · CVE-2016-2879

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar version 7.2

Description The issue is related to the use of outdated hashing algorithms for certain passwords, potentially allowing a local user to obtain and decrypt user credentials.

Recommendations For IBM QRadar version 7.2, update the hashing algorithms to more secure alternatives to prevent the decryption of user credentials.

Correção

Inadequate Encryption Strength

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2016-2879

Produtos afetados

Ibm Qradar

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-2879 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg21997341 · Aviso do Fabricante
• http://securityfocus.com/bid/96502 · Nota
• https://osv.dev/vulnerability/CVE-2016-2879 · Aviso do Fabricante