CVE-2016-9972: Medium severity ibm qradar security information and event manager vulnerability

Published Jun 27, 2017

Updated

IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 120208.

Affected Software

17 affected components

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

IBM QRadar Security Information and Event Manager=7.2.8

IBM QRadar Security Information and Event Manager=7.2.8-p1

IBM QRadar Security Information and Event Manager=7.2.8-p2

IBM QRadar Security Information and Event Manager=7.2.8-p3

IBM QRadar Security Information and Event Manager=7.2.8-p4

IBM QRadar Security Information and Event Manager=7.2.8-p5

IBM QRadar Security Information and Event Manager=7.2.8-p6

IBM QRadar Security Information and Event Manager=7.3.0

IBM QRadar Security Information and Event Manager=7.3.0-p1

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22004925

Event History

Jun 27, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9972?

CVE-2016-9972 is considered a moderate severity vulnerability that can lead to the exposure of sensitive information.

How do I fix CVE-2016-9972?

To fix CVE-2016-9972, ensure that HTTP Strict Transport Security is properly enabled in IBM QRadar.

Which versions of IBM QRadar are affected by CVE-2016-9972?

CVE-2016-9972 affects IBM QRadar versions 7.2.0 through 7.3.0-p1.

What type of attack does CVE-2016-9972 exploit?

CVE-2016-9972 can be exploited through man-in-the-middle attacks due to inadequate HTTP Strict Transport Security.

Is CVE-2016-9972 related to data breaches?

Yes, CVE-2016-9972 is related to potential data breaches as it allows unauthorized access to sensitive information.