PT-2016-5265 · Ibm · Ibm Qradar Siem+1

Chris Shepherd + 6 · Publicado 2016-11-30 · Atualizado 2016-12-01 · CVE-2016-2881

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 QRadar Incident Forensics versions 7.2 before 7.2.7

Description The issue allows remote attackers to bypass intended access restrictions via modified request parameters.

Recommendations For IBM QRadar SIEM version 7.1, apply MR2 Patch 13 or later to resolve the issue. For IBM QRadar SIEM version 7.2, update to version 7.2.7 or later to resolve the issue. For QRadar Incident Forensics version 7.2, update to version 7.2.7 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2016-2881

Produtos afetados

Ibm Qradar Siem

Ibm Qradar Incident Forensics

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-2881 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2881 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21987777 · Aviso do Fabricante