Lucene search
HistoryJul 20, 2022 - 6:15 p.m.
CVE-2022-22424
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.
Affected configurations
Node
ibmqradar_security_information_and_event_managerRange7.3.0–7.3.3
ORibmqradar_security_information_and_event_managerRange7.4.0–7.4.3
ORibmqradar_security_information_and_event_managerMatch7.3.3
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_1
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_10
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_11
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_2
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_3
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_4
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_5
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_6
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_7
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_8
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_9
ORibmqradar_security_information_and_event_managerMatch7.4.3
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_1
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_2
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_3
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_4
ORibmqradar_security_information_and_event_managerMatch7.5.0
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_1
linuxlinux_kernelMatch-
Related
ibm
ibm
cnvd
cnvd
IBM QRadar SIEM Licensing Issue Vulnerability (CNVD-2022-83585)
2022-07-21 00:00:00
cve
cve
CVE-2022-22424
2022-07-20 18:15:08
prion
prion
Code injection
2022-07-20 18:15:00
cvelist
cvelist
CVE-2022-22424
2022-07-19 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2022-22424