Information Disclosure Vulnerability in IBM QRadar User Behavior Analytics
CVE-2022-36771

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Qradar User Behavior Analytics
Vendor
CVE Published:
28 September 2022

Summary

IBM QRadar User Behavior Analytics is susceptible to an information disclosure flaw that allows authenticated users to access sensitive information that should be restricted. This vulnerability could lead to unauthorized insights into user interactions and potentially compromise data privacy. It's crucial for organizations utilizing this feature to review their security policies and implement necessary patches to safeguard against potential exploitation.

Affected Version(s)

QRadar User Behavior Analytics 4.1.8

References

https://www.ibm.com/support/pages/node/6824197
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/232791
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.