Authorization

2016-11-3018:59:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.5%

JSON

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
qradar_security_information_and_event_managereq7.2.0
qradar_security_information_and_event_managereq7.2.4
qradar_security_information_and_event_managereq7.2.6
qradar_security_information_and_event_managereq7.2.1
qradar_security_information_and_event_managereq7.2.5
qradar_security_information_and_event_managerle7.1.0
qradar_security_information_and_event_managereq7.2.2
qradar_security_information_and_event_managereq7.2.3

Name	Operator	Version
qradar_security_information_and_event_manager	eq	7.2.0
qradar_security_information_and_event_manager	eq	7.2.4
qradar_security_information_and_event_manager	eq	7.2.6
qradar_security_information_and_event_manager	eq	7.2.1
qradar_security_information_and_event_manager	eq	7.2.5
qradar_security_information_and_event_manager	le	7.1.0
qradar_security_information_and_event_manager	eq	7.2.2
qradar_security_information_and_event_manager	eq	7.2.3