CVE-2015-2008

Published: Feb 15, 2016Modified: May 6, 2026

4.4

Vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.7 / Impact: 3.6

Source: NVD

Description

IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated administrators to obtain sensitive information by reading a backup archive.

Affected (7)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.1.0
Ibm Qradar Security Information And Event Manager	Version 7.2.0
Ibm Qradar Security Information And Event Manager	Version 7.2.1
Ibm Qradar Security Information And Event Manager	Version 7.2.2
Ibm Qradar Security Information And Event Manager	Version 7.2.3
Ibm Qradar Security Information And Event Manager	Version 7.2.4
Ibm Qradar Security Information And Event Manager	Version 7.2.5

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21967632

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21967632

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.