PT-2018-6248
CVE-2017-1622
·
Published
2018-12-05
·
Updated
2019-10-09
Description by
CVSS 3.1
7.4
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
IBM QRadar SIEM versions 7.2.8 through 7.3
Description:
The issue allows an attacker to potentially spoof a trusted entity by using a man-in-the-middle (MITM) attack, due to incorrect certificate validation.
Recommendations:
For versions 7.2.8 through 7.3, update to a version that correctly validates certificates to prevent MITM attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾