CVE-2015-2008

Опубликовано: 15 фев. 2016

Источник: nvd

CVSS3: 4.4

CVSS2: 3.5

EPSS Низкий

Описание

IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated administrators to obtain sensitive information by reading a backup archive.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21967632
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21967632
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.0019

Низкий

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-q7g5-m2wx-p588