First published: Mon Apr 03 2023(Updated: )
IBM QRadar Data Synchronization App 1.0 through 3.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 217370.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM QRadar Data Synchronization App | <=1.0 | |
IBM QRadar Data Synchronization App | <=3.0.1 | |
IBM QRadar Data Synchronization App | <=1.0 - 3.0.1 | |
IBM QRadar Data Synchronization | >=1.0<3.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-22313 is medium.
CVE-2022-22313 allows an attacker to decrypt highly sensitive information in IBM QRadar Data Synchronization App versions 1.0 through 3.0.1.
Yes, IBM has provided a fix for CVE-2022-22313. Please refer to IBM's support page for more information.
The CWE of CVE-2022-22313 is 327.
You can find more information about CVE-2022-22313 on IBM's support page, IBM X-Force ID page, and CVE Mitre page.