Information disclosure in IBM Qradar Risk Manager
CVE-2014-4832
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.
Vulnerability class: Information Disclosure
EPSS: 0.011 (62.1th percentile) — read the EPSS interpretation.
Affected products
- Ibm Qradar_risk_manager — versions 7.1.0, 7.2.0, 7.2.1
- Ibm Qradar_security_information_and_event_manager — versions 7.1.0, 7.2.0, 7.2.1
- Ibm Qradar_vulnerability_manager — versions 7.2.0, 7.2.1, 7.2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)