PT-2017-13752
CVE-2017-1491
·
Publicado
2017-09-05
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM QRadar Network Security version 5.4
Description
The issue allows interaction between multiple actors to negotiate the algorithm used for protection mechanisms like encryption or authentication. However, it does not select the strongest available algorithm for both parties.
Recommendations
For IBM QRadar Network Security version 5.4, consider configuring the system to prioritize the strongest available algorithm for encryption or authentication to mitigate the risk.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾