PT-2024-5314
CVE-2024-27269
·
Published
2024-05-09
·
Updated
2024-05-14
Description by
CVSS 3.1
6.8
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM QRadar SIEM version 7.5
Description
The issue is related to the disclosure of protected information. It may allow a remote attacker to gain unauthorized access to sensitive information. A privileged user could configure user management in a way that discloses unintended sensitive information across tenants.
Recommendations
For IBM QRadar SIEM version 7.5, ensure that user management configurations do not disclose sensitive information across tenants, and review access controls to prevent unauthorized disclosure of protected information.
Found an issue in the description? Have something to add? Feel free to write us 👾