CVE-2017-1271

IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 124746.

• CWE-326

• http://www.ibm.com/support/docview.wss?uid=swg22010435Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/102034Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039961Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/124746Issue Tracking, VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22010435Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/102034Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039961Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/124746Issue Tracking, VDB Entry, Vendor Advisory

Published

Dec 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12704A heap-based buffer overflow issue was discovered in Advante…
• CVE-2017-12705A Heap-Based Buffer Overflow issue was discovered in Advante…
• CVE-2017-12706A stack-based buffer overflow issue was discovered in Advant…
• CVE-2017-12707A Stack-based Buffer Overflow issue was discovered in Spider…
• CVE-2017-12708An Improper Restriction Of Operations Within The Bounds Of A…
• CVE-2017-12709A Use of Hard-Coded Credentials issue was discovered in MRD-…
• CVE-2017-12710A SQL Injection issue was discovered in Advantech WebAccess …
• CVE-2017-12711An Incorrect Privilege Assignment issue was discovered in Ad…
• CVE-2017-12712The authentication algorithm in Abbott Laboratories pacemake…
• CVE-2017-12713An Incorrect Permission Assignment for Critical Resource iss…
• CVE-2017-12714Abbott Laboratories pacemakers manufactured prior to Aug 28,…
• CVE-2017-12716Abbott Laboratories Accent and Anthem pacemakers manufacture…