PT-2020-10973

CVE-2019-4576

·

Published

2020-06-10

·

Updated

2020-06-16

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM QRadar Network Packet Capture versions 7.3.0 through 7.3.3 Patch 1 IBM QRadar Network Packet Capture version 7.4.0 GA
Description The issue is related to the default password settings, which do not require strong passwords. This makes it easier for attackers to compromise user accounts.
Recommendations For IBM QRadar Network Packet Capture versions 7.3.0 through 7.3.3 Patch 1, consider enforcing strong password policies to mitigate the risk. For IBM QRadar Network Packet Capture version 7.4.0 GA, consider enforcing strong password policies to mitigate the risk. As a temporary workaround, consider disabling default password settings and enforcing strong passwords for all user accounts until a patch is available.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾