IBM QRadar Suite Vulnerable to Certificate Validation Flaw
CVE-2023-47742

5.9MEDIUM

Key Information:

Vendor
IBM
Status
Qradar Suite Products
Cloud Pak For Security
Vendor
CVE Published:
3 March 2024

Summary

IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533.

Affected Version(s)

Cloud Pak for Security 1.10.0.0 <= 1.10.11.0

QRadar Suite Products 1.10.12.0 <= 1.10.18.0

References

https://www.ibm.com/support/pages/node/7129328
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/272533
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.