Security Bulletin: IBM QRadar SIEM is vulnerable to clear text passwords. (CVE-2016-2871)

Summary Some passwords in IBM QRadar SIEM were found in configuration files in clear text. Vulnerability Details CVE-ID: CVE-2016-2871 Description: IBM QRadar stores passwords in clear text in configuration files, that could allow a local user to obtain critical sensitive information and gain...

CVE-2016-2871

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file...

CVE-2016-2871

IBM QRadar SIEM is affected by CVE-2016-2871. The connected IBM bulletin confirms that QRadar stores some passwords in clear text in configuration files, enabling a local attacker to obtain sensitive information. Affected versions are QRadar 7.1 before MR2 Patch 13 and 7.2 before 7.2.7. Remediati...