Local Information Disclosure Vulnerability in IBM QRadar SIEM

CVE-2022-22424

Summary

IBM QRadar SIEM versions 7.3, 7.4, and 7.5 are affected by a local information disclosure vulnerability that arises from improper file permissions set on the TLS key file. This misconfiguration could allow a local user to access sensitive information, potentially compromising the security of the application and the confidentiality of the data it protects. It is critical for users to ensure proper permission settings to mitigate the risks associated with this vulnerability.

References