CVE-2019-4654

Published: Apr 15, 2020Modified: Jun 17, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.2 / Impact: 2.5

Source: NVD

Description

IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-ForceID: 170965.

Affected (4)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	From 7.3.0 to 7.3.3
Ibm Qradar Security Information And Event Manager	Version 7.3.3
Ibm Qradar Security Information And Event Manager	Version 7.3.3 p1
Ibm Qradar Security Information And Event Manager	Version 7.3.3 p2