PT-2021-12239
CVE-2020-4932
·
Published
2021-05-05
·
Updated
2021-05-07
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM QRadar SIEM versions 7.3 through 7.4
Description
The issue concerns hard-coded credentials, including passwords or cryptographic keys, used for inbound authentication, outbound communication, or internal data encryption.
Recommendations
For versions 7.3 and 7.4, consider changing the hard-coded credentials to unique, complex passwords or keys to mitigate the risk of exploitation. As a temporary workaround, restrict access to the affected components that utilize these hard-coded credentials until a more permanent solution is available.
Found an issue in the description? Have something to add? Feel free to write us 👾