PT-2017-10291
CVE-2016-9725
·
Published
2017-03-07
·
Updated
2017-03-09
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM QRadar Incident Forensics version 7.2
Description
The issue concerns Cross-Origin Resource Sharing (CORS), a mechanism that enables web sites to request resources from external sites. This allows for the sharing of resources without the need for duplication.
Recommendations
For IBM QRadar Incident Forensics version 7.2, consider restricting access to external resources to minimize potential risks associated with CORS until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾