PT-2017-8265 · Ibm · Ibm Qradar

Chris Shepherd + 6 · Publicado 2017-03-01 · Atualizado 2017-03-09 · CVE-2016-2880

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar version 7.2

Description The issue concerns the storage of an encryption key used to encrypt the service account password in IBM QRadar. This key can be obtained by a local user, potentially leading to unauthorized access.

Recommendations For IBM QRadar version 7.2, consider restricting local user access to minimize the risk of exploitation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-320

Identificadores relacionados

CVE-2016-2880

Produtos afetados

Ibm Qradar

Referências · 4

• http://ibm.com/support/docview.wss?uid=swg21997340 · Aviso do Fabricante
• http://securityfocus.com/bid/96614 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2880 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2880 · Aviso do Fabricante