CVE-2016-2871

Опубликовано: 30 нояб. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21987769
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94861
http://www-01.ibm.com/support/docview.wss?uid=swg21987769
Patch
Vendor Advisory
http://www.securityfocus.com/bid/94861

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:mr1:*:*:*:*:*:*

Версия до 7.1.0 (включая)

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00051

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-mr7j-29q8-fvrm