Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities. IBM has addressed the relevant vulnerabilities. Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Pypa Setuptools is vulnerable to a denial of service, caused by...

Security Bulletin: Moment js as used by IBM QRadar Advisor With Watson App is vulnerable to denial of service (CVE-2022-31129)

Summary Moment js as used by IBM QRadar Advisor With Watson App is vulnerable to denial of service. IBM has addressed the relevant vulnerabilities. Vulnerability Details CVEID:CVE-2022-31129 DESCRIPTION: Moment is vulnerable to a denial of service, caused by inefficient regular expression...

CVE-2021-20380

IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712...

Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to information exposure (CVE-2021-20380)

Summary IBM QRadar Advisor with Watson App for IBM QRadar SIEM could allow an unauthorized attacker to obtain sensitive information that could aid in further attacks against the system. Vulnerability Details CVEID: CVE-2021-20380 DESCRIPTION: IBM QRadar could allow a remote user to obtain sensiti...

CVE-2020-4408

The IBM QRadar Advisor with Watson App for IBM QRadar SIEM (versions 1.1–2.5.2) has a vulnerability where not all passwords are properly masked during input, potentially exposed to a physical attacker nearby. IBM’s security bulletin notes CVE-2020-4408 and recommends updating to version 2.5.3 to ...

Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to information exposure (CVE-2019-4672)

Summary IBM QRadar Advisor with Watson App for IBM QRadar SIEM could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. Vulnerability Details CVEID: CVE-2019-4672 DESCRIPTION: IBM QRadar Advisor...

Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM uses weaker than expected cryptographic algorithms (CVE-2019-4557)

Summary IBM QRadar Advisor With Watson App for IBM QRadar SIEM uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information stored in the app Vulnerability Details CVEID: CVE-2019-4557 DESCRIPTION: IBM QRadar Advisor uses weaker than...