PT-2016-3594 · Ibm · Ibm Security Qradar Siem

John Zuccato + 3 · Published 2016-02-15 · Updated 2016-02-29 · CVE-2015-2008

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.1.x through 7.1 MR2 Patch 11 IBM Security QRadar SIEM versions 7.2.x through 7.2.5

Description The issue allows remote authenticated administrators to obtain sensitive information by reading a backup archive because SSH private keys are included during backup operations.

Recommendations For IBM Security QRadar SIEM versions 7.1.x through 7.1 MR2 Patch 11, update to at least 7.1 MR2 Patch 12 to resolve the issue. For IBM Security QRadar SIEM versions 7.2.x through 7.2.5, update to at least 7.2.6 to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-2008

Affected Products

Ibm Security Qradar Siem

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-2008 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21967632 · Vendor Advisory