Security Bulletin: IBM QRadar SIEM does not enforce session expiry. (CVE-2015-2005)

Summary Session Expiry not enforced by default in IBM QRadar SIEM Vulnerability Details CVE-ID: CVE-2015-2005 Description: IBM QRadar SIEM could allow a local user to obtain sensitive information due to session expiration not being enforced. A user on the machine could obtain information from the...

CVE-2015-2005

IBM QRadar SIEM is affected by CVE-2015-2005. Affected versions: QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6. The root cause is improper session expiry, enabling a local user to access information from a previous browser session. Remediation: apply IBM fixes 7.2.5 Pat...