CVE-2017-1622

Published: Dec 5, 2018Modified: Nov 21, 2024

7.4

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: NVD

Description

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.

Affected (22)

Products: Ibm: Qradar Incident Forensics

Ibm

1 product

Qradar Incident Forensics

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Incident Forensics	7.2.0 ≤ version < 7.2.8
Ibm Qradar Incident Forensics	7.3.0 ≤ version < 7.3.1
Ibm Qradar Incident Forensics	Version 7.2.8
Ibm Qradar Incident Forensics	Version 7.2.8 p10
Ibm Qradar Incident Forensics	Version 7.2.8 p11
Ibm Qradar Incident Forensics	Version 7.2.8 p12
Ibm Qradar Incident Forensics	Version 7.2.8 p13
Ibm Qradar Incident Forensics	Version 7.2.8 p1
Ibm Qradar Incident Forensics	Version 7.2.8 p3
Ibm Qradar Incident Forensics	Version 7.2.8 p4
Ibm Qradar Incident Forensics	Version 7.2.8 p5
Ibm Qradar Incident Forensics	Version 7.2.8 p6
Ibm Qradar Incident Forensics	Version 7.2.8 p7
Ibm Qradar Incident Forensics	Version 7.2.8 p8
Ibm Qradar Incident Forensics	Version 7.2.8 p9
Ibm Qradar Incident Forensics	Version 7.3.1
Ibm Qradar Incident Forensics	Version 7.3.1 p1
Ibm Qradar Incident Forensics	Version 7.3.1 p2
Ibm Qradar Incident Forensics	Version 7.3.1 p3
Ibm Qradar Incident Forensics	Version 7.3.1 p4
Ibm Qradar Incident Forensics	Version 7.3.1 p5
Ibm Qradar Incident Forensics	Version 7.3.1 p6