PT-2017-10303 · Ibm · Ibm Qradar

Chris Shepherd + 5 · Published 2017-06-27 · Updated 2017-06-30 · CVE-2016-9738

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.2 through 7.3

Description The issue makes it easier for attackers to compromise user accounts due to a lack of strong password requirements by default.

Recommendations For IBM QRadar versions 7.2 through 7.3, consider enforcing strong password policies to mitigate the risk of account compromise.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-9738

Affected Products

Ibm Qradar

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/119783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9738 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22004926 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9738 · Vendor Advisory
• http://securityfocus.com/bid/99266 · Note