CVE-2016-9738

High

Published: 27/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM QRadar versions 7.2 and 7.3 do not require users to have strong passwords by default, making it easier for attackers to compromise user accounts.

Risk Assessment

The lack of strong password requirements increases the risk of unauthorized access to user accounts, potentially leading to serious security breaches.

Recommendation

It is recommended to implement a policy enforcing the use of strong passwords for all users of the IBM QRadar system.

Other vulnerabilities in IBM QRadar 7.2, 7.3

CVE-2017-1162High
IBM QRadar versions 7.2 and 7.3 disclose sensitive information to unauthorized users, which can be used to mount further attacks on the system.

Original NVD description (English source)

IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 119783.