PT-2021-12265 · Ibm · Ibm Qradar Siem

Published 2021-07-16 · Updated 2022-07-12 · CVE-2020-4980

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.3 through 7.4

Description The issue concerns the use of less secure methods for protecting data in transit between hosts when the encrypt host connections option is not enabled, as well as data at rest.

Recommendations For IBM QRadar SIEM versions 7.3 and 7.4, enable the encrypt host connections option to protect data in transit between hosts. As a temporary workaround, consider restricting access to sensitive data at rest until a more secure method of protection is implemented.

Fix

Cleartext Transmission of Sensitive Information

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-319

CWE-312

Related Identifiers

CVE-2020-4980

Affected Products

Ibm Qradar Siem

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/192539 · Vendor Advisory
• https://ibm.com/support/pages/node/6472891 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4980 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4980 · Vendor Advisory
• https://t.me/cibsecurity/26225 · Telegram Post