CVE-2017-1622: High severity ibm security qradar incident forensics vulnerability
Published Dec 5, 2018
·Updated
IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.
Affected Software
22 affected components
IBM QRadar Incident Forensics>=7.2.0<7.2.8
IBM QRadar Incident Forensics>=7.3.0<7.3.1
IBM QRadar Incident Forensics=7.2.8
IBM QRadar Incident Forensics=7.2.8-p1
IBM QRadar Incident Forensics=7.2.8-p10
IBM QRadar Incident Forensics=7.2.8-p11
IBM QRadar Incident Forensics=7.2.8-p12
IBM QRadar Incident Forensics=7.2.8-p13
IBM QRadar Incident Forensics=7.2.8-p3
IBM QRadar Incident Forensics=7.2.8-p4
IBM QRadar Incident Forensics=7.2.8-p5
IBM QRadar Incident Forensics=7.2.8-p6
IBM QRadar Incident Forensics=7.2.8-p7
IBM QRadar Incident Forensics=7.2.8-p8
IBM QRadar Incident Forensics=7.2.8-p9
IBM QRadar Incident Forensics=7.3.1
IBM QRadar Incident Forensics=7.3.1-p1
IBM QRadar Incident Forensics=7.3.1-p2
IBM QRadar Incident Forensics=7.3.1-p3
IBM QRadar Incident Forensics=7.3.1-p4
IBM QRadar Incident Forensics=7.3.1-p5
IBM QRadar Incident Forensics=7.3.1-p6
Remediation
Patch Available
Event History
Dec 5, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1622?
CVE-2017-1622 is classified as a medium severity vulnerability that allows for man-in-the-middle attacks.
2
How do I fix CVE-2017-1622?
To remediate CVE-2017-1622, ensure that you update IBM QRadar SIEM to the latest version that contains the fix.
3
Which versions of IBM QRadar SIEM are affected by CVE-2017-1622?
CVE-2017-1622 affects IBM QRadar SIEM versions 7.2.8 and 7.3.0 to 7.3.1.
4
What kind of attack does CVE-2017-1622 allow?
CVE-2017-1622 allows attackers to perform man-in-the-middle attacks by spoofing trusted entities.
5
Is CVE-2017-1622 related to certificate validation?
Yes, CVE-2017-1622 is related to improper validation of certificates within IBM QRadar SIEM.