CVE-2016-2874

Опубликовано: 30 нояб. 2016

Источник: nvd

CVSS3: 3.1

CVSS2: 3.5

EPSS Низкий

Описание

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21987771
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95003
http://www-01.ibm.com/support/docview.wss?uid=swg21987771
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95003

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:mr1:*:*:*:*:*:*

Версия до 7.1.0 (включая)

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00122

Низкий

3.1 Low

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-4x9c-5hwj-jjq8