Cryptographic Weakness in IBM Security Guardium Big Data Intelligence
CVE-2018-1425

5.9MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
27 February 2018

Summary

IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is susceptible to vulnerabilities due to the use of cryptographic algorithms that do not meet security expectations. This weakness could potentially allow attackers to decrypt sensitive data, posing significant risks to data integrity and confidentiality. Organizations utilizing this product should evaluate their security measures and consider immediate remediation to safeguard sensitive information.

Affected Version(s)

Security Guardium Big Data Intelligence 3.1

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.