CVE-2017-1624: Medium severity ibm qradar security information and event manager vulnerability

Published Apr 4, 2018

Updated

IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122.

Affected Software

4 affected components

IBM QRadar Security Information and Event Manager=7.3.0

IBM QRadar Security Information and Event Manager=7.3.1

IBM QRadar Security Information and Event Manager=7.3.1-p1

IBM QRadar Security Information and Event Manager=7.3.1-p2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22015236

Event History

Apr 4, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1624?

CVE-2017-1624 has been classified with a high severity due to permission misconfigurations allowing unintended access to critical resources.

How do I fix CVE-2017-1624?

To fix CVE-2017-1624, update IBM QRadar Security Information and Event Manager to the latest version that addresses this vulnerability.

What are the affected versions for CVE-2017-1624?

CVE-2017-1624 affects IBM QRadar Security Information and Event Manager versions 7.3.0 and 7.3.1, including specific patch versions.

What type of vulnerability is CVE-2017-1624?

CVE-2017-1624 is a permissions-related vulnerability that allows unauthorized reading or modification of security-critical resources.

Who reported CVE-2017-1624?

CVE-2017-1624 was reported by IBM and is documented in the IBM X-Force database under ID 133122.