PT-2014-6143 · Ibm · Ibm Security Qradar Siem

Published 2014-10-19 · Updated 2017-08-29 · CVE-2014-4825

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2

Description The issue is related to the improper implementation of secure connections, allowing man-in-the-middle attackers to discover cleartext credentials via unspecified vectors.

Recommendations For IBM Security QRadar SIEM QRM versions 7.1 MR1 through 7.2 MR2, consider implementing additional security measures to secure connections and protect credentials, such as using encryption and secure communication protocols. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2014-4825

Affected Products

Ibm Security Qradar Siem

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21686478 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4825 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95575 · Note