Security Bulletin: IBM QRadar Incident Forensics is vulnerable to overly permissive CORS access policies (CVE-2016-9725)

Summary IBM QRadar Incident Forensics is affected by Cross-Origin Resource Sharing CORS which is a mechanism that allows web sites to request resources from external sites, avoiding the need to duplicate them. Vulnerability Details CVEID: CVE-2016-9725 DESCRIPTION: IBM QRadar Incident Forensics...

CVE-2016-9725

CVE-2016-9725 affects IBM QRadar Incident Forensics (7.2.x). The issue is described as overly permissive Cross-Origin Resource Sharing (CORS) policies in the Incident Forensics component, enabling cross-origin requests that would normally be restricted. Connected IBM bulletin references confirm t...