VulnerabilityModified
CVE-2014-0837
The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
MEDIUM 4.3EPSS 0.66%
Does this matter?
Lower severity and a low EPSS score (0.66%). Track it; it rarely justifies an emergency change on its own.
Description
The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 0.66% probability · 50th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- ibm/qradar security information and event manager
- Source
- psirt@us.ibm.com
References
- http://osvdb.org/102552
- http://seclists.org/fulldisclosure/2014/Jan/166
- http://secunia.com/advisories/56653
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066Vendor Advisory
- http://www.securityfocus.com/bid/65127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90680
- http://osvdb.org/102552
- http://seclists.org/fulldisclosure/2014/Jan/166
- http://secunia.com/advisories/56653
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066Vendor Advisory
- http://www.securityfocus.com/bid/65127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90680
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.