CVE-2016-2880

Published: Mar 1, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.

Affected (8)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Version 7.2.0
Ibm Qradar Security Information And Event Manager	Version 7.2.1
Ibm Qradar Security Information And Event Manager	Version 7.2.2
Ibm Qradar Security Information And Event Manager	Version 7.2.3
Ibm Qradar Security Information And Event Manager	Version 7.2.4
Ibm Qradar Security Information And Event Manager	Version 7.2.5
Ibm Qradar Security Information And Event Manager	Version 7.2.6
Ibm Qradar Security Information And Event Manager	Version 7.2.7

Related CWEs

CWE-320

References (4)

http://www.ibm.com/support/docview.wss?uid=swg21997340

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/96614

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg21997340

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/96614

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.