PT-2017-12139 · Ibm · Ibm Qradar

Chris Shepherd + 5 · Published 2017-09-12 · Updated 2017-09-16 · CVE-2017-1162

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.2 through 7.3

Description The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system.

Recommendations For IBM QRadar versions 7.2 through 7.3, update to a version that includes the fix for this issue to prevent unauthorized disclosure of sensitive information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-1162

Affected Products

Ibm Qradar

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-1162 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22008194 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/122957 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1162 · Vendor Advisory
• http://securityfocus.com/bid/100686 · Note