CVE-2015-1999: Infoleak

Published Nov 8, 2015

Updated

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.

Affected Software

6 affected components

IBM Security QRadar Incident Forensics=7.2.0

IBM Security QRadar Incident Forensics=7.2.1

IBM Security QRadar Incident Forensics=7.2.2

IBM Security QRadar Incident Forensics=7.2.3

IBM Security QRadar Incident Forensics=7.2.4

IBM Security QRadar Incident Forensics=7.2.5

Event History

Nov 8, 2015

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1999?

CVE-2015-1999 has a medium severity rating due to its potential impact on sensitive information disclosure.

How do I fix CVE-2015-1999?

To fix CVE-2015-1999, upgrade IBM Security QRadar Incident Forensics to version 7.2.5 Patch 5 or later.

What versions of IBM Security QRadar Incident Forensics are affected by CVE-2015-1999?

Versions 7.2.0 through 7.2.4 of IBM Security QRadar Incident Forensics are affected by CVE-2015-1999.

What is the risk of not addressing CVE-2015-1999?

Not addressing CVE-2015-1999 could allow attackers to capture sensitive session IDs via web-server logs and browser history.

Can CVE-2015-1999 be exploited remotely?

Yes, CVE-2015-1999 can be exploited remotely by attackers who can access the relevant web server logs.