CVE-2015-1996: Infoleak

Published Nov 8, 2015

Updated

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation.

Affected Software

6 affected components

IBM Security QRadar Incident Forensics=7.2.0

IBM Security QRadar Incident Forensics=7.2.1

IBM Security QRadar Incident Forensics=7.2.2

IBM Security QRadar Incident Forensics=7.2.3

IBM Security QRadar Incident Forensics=7.2.4

IBM Security QRadar Incident Forensics=7.2.5

Event History

Nov 8, 2015

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1996?

CVE-2015-1996 is classified as a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2015-1996?

To fix CVE-2015-1996, upgrade IBM Security QRadar Incident Forensics to version 7.2.5 Patch 5 or later.

What type of attack does CVE-2015-1996 allow?

CVE-2015-1996 allows physically proximate attackers to access sensitive information from local cache due to improper response caching.

Which versions of IBM Security QRadar Incident Forensics are affected by CVE-2015-1996?

CVE-2015-1996 affects IBM Security QRadar Incident Forensics versions 7.2.0 to 7.2.4.

What impact does CVE-2015-1996 have on organizations?

CVE-2015-1996 can lead to unauthorized access to sensitive data by allowing attackers to exploit cached information on unattended workstations.