CVE-2023-50949

CWE-295 — Improper Certificate Validation3 documents3 sources
Severity
8.1HIGH
EPSS
0.1%
top 82.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar SiemIBM Qradar Security Information AND Event Manager
Timeline
PublishedApr 11

Description

IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem7.5

🔴Vulnerability Details

2
GHSA
GHSA-jpjw-54h4-86gr: IBM QRadar SIEM 7↗2024-04-11
▶
CVEList
IBM QRadar improper certificate validation↗2024-04-11
▶