PT-2014-6143 · Ibm · Ibm Security Qradar Siem

Publicado 2014-10-19 · Atualizado 2017-08-29 · CVE-2014-4825

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2

Description The issue is related to the improper implementation of secure connections, allowing man-in-the-middle attackers to discover cleartext credentials via unspecified vectors.

Recommendations For IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2, consider implementing additional security measures to secure connections and protect credentials, such as using encryption and secure communication protocols. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-4825

Produtos afetados

Ibm Security Qradar Siem

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21686478 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95575 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4825 · Nota de Segurança