Security Bulletin: Selection of Less-Secure Algorithm During Negotiation vulnerability affects IBM Security Guardium (CVE-2017-1271)

Summary IBM Security Guardium supports interaction between multiple actors but does not select the strongest algorithm that is available to both parties. IBM Security Guardium has provided a fix for this vulnerability. Vulnerability Details CVEID: CVE-2017-1271 DESCRIPTION: IBM Security Guardium...

PT-2017-12662

Name of the Vulnerable Software and Affected Versions IBM Security Guardium versions 9.0 through 9.5 Description The issue allows interaction between multiple actors to negotiate the algorithm used for protection mechanisms like encryption or authentication. However, it does not select the...