Lucene search
IbmCVE-2023-26276HistoryJun 27, 2023 - 6:15 p.m.
CVE-2023-26276
2023-06-2718:15:12
CWE-327
ibm
web.nvd.nist.gov
51
ibm
qradar
siem
7.5.0
weak
cryptographic algorithms
nvd
cve-2023-26276
ibm x-force id 248147
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
41.4%
IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 248147.
Affected configurations
Node
ibmqradar_security_information_and_event_managerMatch7.5.0-
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_1
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_2
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_3
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_4
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_5
linuxlinux_kernelMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_security_information_and_event_manager | 7.5.0 | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:-:*:*:*:*:*:* |
| ibm | qradar_security_information_and_event_manager | 7.5.0 | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_1:*:*:*:*:*:* |
| ibm | qradar_security_information_and_event_manager | 7.5.0 | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_2:*:*:*:*:*:* |
| ibm | qradar_security_information_and_event_manager | 7.5.0 | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_3:*:*:*:*:*:* |
| ibm | qradar_security_information_and_event_manager | 7.5.0 | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_4:*:*:*:*:*:* |
| ibm | qradar_security_information_and_event_manager | 7.5.0 | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.5.0:update_pack_5:*:*:*:*:*:* |
| linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security QRadar SIEM",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "7.5.0"
}
]
}
]Related
prion
prion
Information disclosure
2023-06-27 18:15:00
nvd
nvd
CVE-2023-26276
2023-06-27 18:15:12
cvelist
cvelist
CVE-2023-26276 IBM QRadar information disclosure
2023-06-27 17:09:43
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
41.4%
Related for CVE-2023-26276