IBM Security Bulletin: IBM QRadar SIEM uses outdated hash algorithms. (CVE-2017-1695)

The software uses an outdated or insecure cryptographic library or it is using a proprietary crypto standard which is likely to be vulnerable.

CVE(s): CVE-2017-1695

Affected product(s) and affected version(s):

QRadar / QRM / QVM / QRIF / QNI 7.3.0 to 7.3.1 Patch 4

QRadar / QRM / QVM / QRIF / QNI 7.2.0 to 7.2.8 Patch 11

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10719107
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134177

The post IBM Security Bulletin: IBM QRadar SIEM uses outdated hash algorithms. (CVE-2017-1695) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2WQbett