Security Bulletin: IBM QRadar SIEM is vulnerable to authentication bypass (CVE-2019-4210)

Summary

IBM QRadar SIEM is vulnerable to authentication bypass which could lead to disclosure of sensitive information

Vulnerability Details

CVEID: CVE-2019-4210
**Description:**IBM QRadar SIEM could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration.
**CVSS Base Score:**9.4
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/158986&gt; for the current score
**CVSS Environmental Score:***Undefined
**CVSS Vector:**CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Affected Products and Versions

IBM QRadar SIEM 7.3.2 GA - 7.3.2 GA Interim Fix 1

Remediation/Fixes

QRadar / QRM / QVM / QRIF / QNI 7.3.2 GA Interim Fix 2

Workarounds and Mitigations

None