CVE-2017-1598: High severity IBM Security Guardium vulnerability
Published Dec 20, 2017
·Updated
IBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 132611.
Affected Software
5 affected components
IBM Security Guardium=10.0
IBM Security Guardium=10.0.1
IBM Security Guardium=10.1.0
IBM Security Guardium=10.1.2
IBM Security Guardium=10.1.3
Event History
Dec 20, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1598?
CVE-2017-1598 has a medium severity rating due to the potential exposure of sensitive information.
2
How do I fix CVE-2017-1598?
To fix CVE-2017-1598, upgrade to a patched version of IBM Security Guardium that employs stronger cryptographic algorithms.
3
What systems are affected by CVE-2017-1598?
CVE-2017-1598 affects IBM Security Guardium versions 10.0, 10.0.1, 10.1.0, 10.1.2, and 10.1.3.
4
What type of information is at risk with CVE-2017-1598?
CVE-2017-1598 puts highly sensitive information at risk due to the use of weak cryptographic algorithms.
5
Is it safe to use vulnerable versions of IBM Security Guardium?
Using vulnerable versions of IBM Security Guardium is not safe as they may expose sensitive data to potential attackers.