CVE-2017-1268

published 2018-12-13

CVE-2017-1268: IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C H I N A N

IBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 124743.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	security_guardium	—	—
ibm	security_guardium	—	—
ibm	security_guardium	10.0 – 10.5	—

CWE-310