PT-2016-3594 · Ibm · Ibm Security Qradar Siem

John Zuccato + 3 · Publicado 2016-02-15 · Atualizado 2016-02-29 · CVE-2015-2008

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.1.x through 7.1 MR2 Patch 11 IBM Security QRadar SIEM versions 7.2.x through 7.2.5

Description The issue allows remote authenticated administrators to obtain sensitive information by reading a backup archive because SSH private keys are included during backup operations.

Recommendations For IBM Security QRadar SIEM versions 7.1.x through 7.1 MR2 Patch 11, update to at least 7.1 MR2 Patch 12 to resolve the issue. For IBM Security QRadar SIEM versions 7.2.x through 7.2.5, update to at least 7.2.6 to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-2008

Produtos afetados

Ibm Security Qradar Siem

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-2008 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21967632 · Aviso do Fabricante