CVE-2018-1568 — Sensitive Information Exposure in IBM Qradar Incident Forensics

CWE-200 — Sensitive Information ExposureCWE-287 — Improper Authentication6 documents5 sources
Severity
3.3LOWNVD
CNA4.0
EPSS
0.0%
top 87.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Incident ForensicsIBM Qradar Siem
Timeline
PublishedDec 5
Latest updateMay 13

Description

IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem7.2, 7.3+1
▶NVDibm/qradar_incident_forensics7.2.0 — 7.2.8+3

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qx5w-vj9r-97wc: IBM QRadar SIEM 7↗2022-05-13
▶
CVEList
CVE-2018-1568: IBM QRadar SIEM 7↗2018-12-05
▶

📋Vendor Advisories

1
Red Hat
strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c↗2018-09-24
▶

💬Community

1
Bugzilla
CVE-2018-16152 strongswan: authentication bypass in verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c↗2018-10-03
▶
CVE-2018-1568 — Sensitive Information Exposure in IBM | cvebase