CVE-2017-1491

High

Published: 05/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM QRadar Network Security 5.4 supports interaction between multiple actors who can negotiate which algorithm should be used as a protection mechanism, but it does not select the strongest algorithm available to both parties.

Risk Assessment

The failure to select the strongest algorithm may result in the use of weaker protection mechanisms, increasing the risk of data security breaches.

Recommendation

It is recommended to update to the latest version of the software that ensures the selection of the strongest protection algorithms and to review security configurations.

Other vulnerabilities in IBM QRadar Network Security 5.4

CVE-2017-1458High
IBM QRadar Network Security 5.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Original NVD description (English source)

IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 128689.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS