Information disclosure in IBM Qradar Security Information And Event Manager

CVE-2014-4826

IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 does not properly handle SSH connections, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.

Affected products

Ibm Qradar_security_information_and_event_manager — versions 7.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)