Sensitive Information Exposure in IBM Security QRadar SIEM
CVE-2015-2008

4.4MEDIUM

Key Information:

Vendor

IBM
Status
Qradar Security Information And Event Manager
Vendor
CVE Published:
15 February 2016

What is CVE-2015-2008?

The vulnerability in IBM Security QRadar SIEM allows remote authenticated administrators to access SSH private keys during backup operations. This exposure can lead to unauthorized access to sensitive information contained within backup archives, potentially compromising the security of the entire system. Administrators are advised to promptly upgrade to the patched versions to mitigate this security risk.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21967632
x_refsource_CONFIRM

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-2008 : Sensitive Information Exposure in IBM Security QRadar SIEM