CVE-2016-2879: Weak Encryption

Published Mar 1, 2017

Updated

IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference #: 1997341.

Affected Software

8 affected components

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21997341

Event History

Mar 1, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-2879?

CVE-2016-2879 has a medium severity rating as it involves outdated hashing algorithms that compromise password security.

How do I fix CVE-2016-2879?

To fix CVE-2016-2879, update your IBM QRadar Security Information and Event Manager to a version that uses stronger hashing algorithms.

What versions of IBM QRadar are affected by CVE-2016-2879?

CVE-2016-2879 affects IBM QRadar versions 7.2.0 through 7.2.7.

Is there a risk of password exposure with CVE-2016-2879?

Yes, CVE-2016-2879 allows local users to potentially obtain and decrypt user credentials due to weak hashing methods.

What should I do if I'm using IBM QRadar version 7.2.x?

If you are using any version of IBM QRadar 7.2.x, you should upgrade to a newer version that addresses the security issues outlined in CVE-2016-2879.