Security Bulletin: CVE-2018-1648

Summary

The software uses an outdated insecure cipher or it is using a proprietary crypto standard which is likely to be vulnerable.

Vulnerability Details

CVEID: CVE-2018-1648
**Description:**IBM QRadar Incident Forensics uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
**CVSS Base Score:**5.90
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/144653&gt; for the current score
**CVSS Environmental Score:***Undefined
**CVSS Vector:**CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products and Versions

IBM QRadar Incident Forensics 7.2.0 - 7.2.8 Patch 13

IBM QRadar Incident Forensics 7.3.0 - 7.3.1 Patch 5

Remediation/Fixes

QRadar / QRM / QVM / QRIF / QNI 7.3.1 Patch 6

QRadar / QRM / QVM / QRIF / QNI 7.2.8 Patch 14

Workarounds and Mitigations

None