CVE-2017-1271

Published: Dec 7, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 124746.

Affected (3)

Products: Ibm: Security Guardium

1 product

Security Guardium

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium	Version 9.0
Ibm Security Guardium	Version 9.1
Ibm Security Guardium	Version 9.5

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (8)

http://www.ibm.com/support/docview.wss?uid=swg22010435

Source: psirt@us.ibm.com

Issue TrackingVendor Advisory

http://www.securityfocus.com/bid/102034

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039961

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/124746

Source: psirt@us.ibm.com

Issue TrackingVDB EntryVendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22010435

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

http://www.securityfocus.com/bid/102034

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039961

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/124746

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVDB EntryVendor Advisory

Timeline

No history available yet.