Information disclosure

2019-05-2915:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

JSON

IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072.

CPENameOperatorVersion
qradar_security_information_and_event_managereq7.2.8 p2
qradar_security_information_and_event_managereq7.2.8 p1
qradar_security_information_and_event_managereq7.2.8
qradar_security_information_and_event_managerge7.1.2
qradar_security_information_and_event_managerlt7.2.8

Name	Operator	Version
qradar_security_information_and_event_manager	eq	7.2.8 p2
qradar_security_information_and_event_manager	eq	7.2.8 p1
qradar_security_information_and_event_manager	eq	7.2.8
qradar_security_information_and_event_manager	ge	7.1.2
qradar_security_information_and_event_manager	lt	7.2.8