CVE-2014-4832 — Sensitive Information Exposure in IBM Qradar Risk Manager

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 54.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Qradar Risk ManagerIBM Qradar Security Information AND Event ManagerIBM Qradar Vulnerability Manager
Timeline
PublishedNov 28
Latest updateMay 17

Description

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

▶NVDibm/qradar_risk_manager6 versions+5

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f628-2fh6-v9j5: IBM Security QRadar SIEM and QRadar Risk Manager 7↗2022-05-17
▶
CVEList
CVE-2014-4832: IBM Security QRadar SIEM and QRadar Risk Manager 7↗2014-11-28
▶
CVE-2014-4832 — Sensitive Information Exposure in IBM | cvebase