CVE-2017-1622

Опубликовано: 05 дек. 2018

Источник: nvd

CVSS3: 3.7

CVSS3: 7.4

CVSS2: 5.8

EPSS Низкий

Описание

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/133120
VDB Entry
Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10742713
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/133120
VDB Entry
Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10742713
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*

Версия от 7.2.0 (включая) до 7.2.8 (исключая)

cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*

Версия от 7.3.0 (включая) до 7.3.1 (исключая)

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:-:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p1:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p10:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p11:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p12:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p13:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p3:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p4:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p5:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p6:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p7:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p8:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:p9:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:-:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p1:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p2:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p3:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p4:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p5:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:p6:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00079

Низкий

3.7 Low

CVSS3

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-h975-5qpw-9pwh

CVSS3: 7.4

github

больше 3 лет назад

EPSS

Процентиль: 24%

0.00079

Низкий

3.7 Low

CVSS3

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-295