Security Bulletin: IBM QRadar SIEM is vulnerable to incorrect authorization. (CVE-2016-2874)

Summary The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action. Vulnerability Details CVE-ID: CVE-2016-2874 Description: IBM QRadar under some configurations allow product authorization rules to be bypassed...

CVE-2016-2874

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-2874

The CVE-2016-2874 issue affects IBM QRadar SIEM (versions 7.1 prior to MR2 Patch 13 and 7.2 prior to 7.2.7). Affected component/area: authorization checks; underlying root cause enables bypass of product authorization rules, allowing remote authenticated users to access information they should no...