Not rated
CVE-2017-1491 IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate…
Description
IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 128689.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QRadar Network Security | 5.4 | No fix stated |
Other CVEs of QRadar Network Security
The 8 CVEs of QRadar Network Security →
CVE-2020-4159
IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to…
5.3
Medium
CVE-2020-4157
IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key,…
6.8
Medium
CVE-2020-4160
IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the…
5.9
Medium
CVE-2020-4153
IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting
5.4
Medium