PT-2017-13752
CVE-2017-1491
·
Published
2017-09-05
·
Updated
2019-10-03
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM QRadar Network Security version 5.4
Description
The issue allows interaction between multiple actors to negotiate the algorithm used for protection mechanisms like encryption or authentication. However, it does not select the strongest available algorithm for both parties.
Recommendations
For IBM QRadar Network Security version 5.4, consider configuring the system to prioritize the strongest available algorithm for encryption or authentication to mitigate the risk.
Found an issue in the description? Have something to add? Feel free to write us 👾