SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2018-1612

IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information.

MEDIUM 5.8EPSS 57.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 57.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164.

CVSS 3.0
5.8 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
EPSS
56.95% probability · 99th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
ibm/qradar security information and event manager
Source
psirt@us.ibm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.