PT-2022-3661 · Ibm · Ibm Qradar Network Security

Published 2022-07-12 · Updated 2022-07-16 · CVE-2020-4157

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar Network Security versions 5.4.0 through 5.5.0

Description The issue is related to the use of hard-coded credentials, such as a password or cryptographic key, in IBM QRadar Network Security. This could allow a remote attacker to gain unauthorized access to protected information. The vulnerability is associated with the system's inbound authentication, outbound communication to external components, or encryption of internal data.

Recommendations For IBM QRadar Network Security versions 5.4.0 through 5.5.0, consider changing the hard-coded credentials to unique, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the system to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2022-04448

CVE-2020-4157

Affected Products

Ibm Qradar Network Security

References · 6

• https://ibm.com/support/pages/node/6602931 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/174337 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4157 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04448 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-4157 · Security Note
• https://t.me/cibsecurity/46082 · Telegram Post