PT-2020-10973
CVE-2019-4576
·
Published
2020-06-10
·
Updated
2020-06-16
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM QRadar Network Packet Capture versions 7.3.0 through 7.3.3 Patch 1
IBM QRadar Network Packet Capture version 7.4.0 GA
Description
The issue is related to the default password settings, which do not require strong passwords. This makes it easier for attackers to compromise user accounts.
Recommendations
For IBM QRadar Network Packet Capture versions 7.3.0 through 7.3.3 Patch 1, consider enforcing strong password policies to mitigate the risk.
For IBM QRadar Network Packet Capture version 7.4.0 GA, consider enforcing strong password policies to mitigate the risk.
As a temporary workaround, consider disabling default password settings and enforcing strong passwords for all user accounts until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾