CVE-2016-9738

HIGH

IBM QRadar 7.2-7.3 - Weak Password Requirements

Title source: llm
STIX 2.1

Description

IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 119783.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg22004926
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99266

Scores

CVSS v3 7.5
EPSS 0.0161
EPSS Percentile 73.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-254
Status published
Products (12)
ibm/qradar_security_information_and_event_manager 7.2.0
ibm/qradar_security_information_and_event_manager 7.2.1
ibm/qradar_security_information_and_event_manager 7.2.2
ibm/qradar_security_information_and_event_manager 7.2.3
ibm/qradar_security_information_and_event_manager 7.2.4
ibm/qradar_security_information_and_event_manager 7.2.5
ibm/qradar_security_information_and_event_manager 7.2.6
ibm/qradar_security_information_and_event_manager 7.2.7
ibm/qradar_security_information_and_event_manager 7.2.8 (7 CPE variants)
ibm/qradar_security_information_and_event_manager 7.3.0 (2 CPE variants)
... and 2 more
Published Jun 27, 2017
Tracked Since Feb 18, 2026