Information Disclosure Vulnerability in IBM QRadar Advisor

CVE-2019-4672

What is CVE-2019-4672?

IBM QRadar Advisor versions 1.1 to 2.5 are susceptible to an information disclosure vulnerability that enables unauthorized attackers to glean sensitive data through specifically crafted HTTP requests. This exploitation can further facilitate subsequent attacks against the affected systems, posing a significant security risk. To mitigate these vulnerabilities, users are encouraged to update to the latest version and review any security best practices to safeguard their environments.

References