IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2021-94163)

IBM QRadar SIEM is a suite of solutions from IBM USA that leverages security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, etc. IBM QRadar SIEM suffers from an information disclosure vulnerability that stems from a server using man-in-the-middle technology for inter-host communication without entity authentication for key exchange, which could be exploited by an attacker to gain access to sensitive information.