CVE-2019-4264

CVE-2019-4264 affects IBM QRadar WinCollect (Agent) in QRadar SIEM 7.1.2–7.2.8 Patch 2. The root cause is that TLS Syslog server certificate validation is not performed (or is ignored), enabling MITM-style information disclosure by spoofing a trusted server. Public details specify that WinCollect...