CVE-2016-2879

Published: Mar 1, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference #: 1997341.

Affected (8)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.2.0
Ibm Qradar Security Information And Event Manager	Version 7.2.1
Ibm Qradar Security Information And Event Manager	Version 7.2.2
Ibm Qradar Security Information And Event Manager	Version 7.2.3
Ibm Qradar Security Information And Event Manager	Version 7.2.4
Ibm Qradar Security Information And Event Manager	Version 7.2.5
Ibm Qradar Security Information And Event Manager	Version 7.2.6
Ibm Qradar Security Information And Event Manager	Version 7.2.7

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

http://www.ibm.com/support/docview.wss?uid=swg21997341

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/96502

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg21997341

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/96502

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.