PT-2018-6258 · Ibm · Ibm Qradar

Chris Shepherd + 6 · Published 2018-04-04 · Updated 2019-10-09 · CVE-2017-1624

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: IBM QRadar versions 7.3 through 7.3.1

Description: The issue allows a security-critical resource to be read or modified by unintended actors due to improper permission specifications.

Recommendations: For IBM QRadar versions 7.3 through 7.3.1, update the permission settings to restrict access to the security-critical resource, ensuring it can only be read or modified by intended actors.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2017-1624

Affected Products

Ibm Qradar

References · 4

• https://osv.dev/vulnerability/CVE-2017-1624 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/133122 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1624 · Security Note
• http://ibm.com/support/docview.wss?uid=swg22015236 · Vendor Advisory