CVE-2018-1648

Published: Dec 5, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 144653.

Affected (21)

Products: Ibm: Qradar Incident Forensics

Ibm

1 product

Qradar Incident Forensics

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Incident Forensics	7.2.0 ≤ version < 7.2.8
Ibm Qradar Incident Forensics	7.3.0 ≤ version < 7.3.1
Ibm Qradar Incident Forensics	Version 7.2.8
Ibm Qradar Incident Forensics	Version 7.2.8 p10
Ibm Qradar Incident Forensics	Version 7.2.8 p11
Ibm Qradar Incident Forensics	Version 7.2.8 p12
Ibm Qradar Incident Forensics	Version 7.2.8 p13
Ibm Qradar Incident Forensics	Version 7.2.8 p1
Ibm Qradar Incident Forensics	Version 7.2.8 p3
Ibm Qradar Incident Forensics	Version 7.2.8 p4
Ibm Qradar Incident Forensics	Version 7.2.8 p5
Ibm Qradar Incident Forensics	Version 7.2.8 p6
Ibm Qradar Incident Forensics	Version 7.2.8 p7
Ibm Qradar Incident Forensics	Version 7.2.8 p8
Ibm Qradar Incident Forensics	Version 7.2.8 p9
Ibm Qradar Incident Forensics	Version 7.3.1
Ibm Qradar Incident Forensics	Version 7.3.1 p1
Ibm Qradar Incident Forensics	Version 7.3.1 p2
Ibm Qradar Incident Forensics	Version 7.3.1 p3
Ibm Qradar Incident Forensics	Version 7.3.1 p4
Ibm Qradar Incident Forensics	Version 7.3.1 p5