Security Bulletin: IBM QRadar SIEM is vulnerable to KDC Spoofing (CVE-2019-4545)

Summary IBM QRadar SIEM when configured to use Active Directory Authentication may be susceptible to spoofing attacks. Vulnerability Details CVEID: CVE-2019-4545 DESCRIPTION: IBM QRadar SIEM when configured to use Active Directory Authentication may be susceptible to spoofing attacks. CVSS Base...

CVE-2019-4545

IBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be susceptible to spoofing attacks. IBM X-Force ID: 165877...

CVE-2019-4545

CVE-2019-4545 affects IBM QRadar SIEM 7.3–7.4 when AD authentication is enabled. The issue is a Kerberos KDC spoofing vulnerability that can enable spoofing of authentication, as described in IBM’s advisory and derived CVSS data. Affected versions include QRadar 7.4.x and 7.3.x with AD config; im...