Cryptographic Weakness in IBM Security Guardium Big Data Intelligence
CVE-2018-1425

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Security Guardium Big Data Intelligence
Vendor
CVE Published:
27 February 2018

What is CVE-2018-1425?

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is susceptible to vulnerabilities due to the use of cryptographic algorithms that do not meet security expectations. This weakness could potentially allow attackers to decrypt sensitive data, posing significant risks to data integrity and confidentiality. Organizations utilizing this product should evaluate their security measures and consider immediate remediation to safeguard sensitive information.

Affected Version(s)

Security Guardium Big Data Intelligence 3.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/139033
x_refsource_MISC
http://www.ibm.com/support/docview.wss?uid=swg22013751
x_refsource_CONFIRM
http://www.securityfocus.com/bid/103229
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.