PT-2017-8265 · Ibm · Ibm Qradar

Chris Shepherd + 6 · Published 2017-03-01 · Updated 2017-03-09 · CVE-2016-2880

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar version 7.2

Description The issue concerns the storage of an encryption key used to encrypt the service account password in IBM QRadar. This key can be obtained by a local user, potentially leading to unauthorized access.

Recommendations For IBM QRadar version 7.2, consider restricting local user access to minimize the risk of exploitation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-320

Related Identifiers

CVE-2016-2880

Affected Products

Ibm Qradar

References · 4

• http://ibm.com/support/docview.wss?uid=swg21997340 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2880 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2880 · Vendor Advisory
• http://securityfocus.com/bid/96614 · Note