CVE-2018-1568: Infoleak
Published Dec 5, 2018
·Updated
IBM QRadar SIEM 7.2 and 7.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 143118.
Affected Software
20 affected components
IBM QRadar Incident Forensics>=7.2.0<7.2.8
IBM QRadar Incident Forensics>=7.3.0<7.3.1
IBM QRadar Incident Forensics=7.2.8
IBM QRadar Incident Forensics=7.2.8-p1
IBM QRadar Incident Forensics=7.2.8-p10
IBM QRadar Incident Forensics=7.2.8-p11
IBM QRadar Incident Forensics=7.2.8-p12
IBM QRadar Incident Forensics=7.2.8-p13
IBM QRadar Incident Forensics=7.2.8-p3
IBM QRadar Incident Forensics=7.2.8-p4
IBM QRadar Incident Forensics=7.2.8-p5
IBM QRadar Incident Forensics=7.2.8-p6
IBM QRadar Incident Forensics=7.2.8-p7
IBM QRadar Incident Forensics=7.2.8-p8
IBM QRadar Incident Forensics=7.2.8-p9
IBM QRadar Incident Forensics=7.3.1
IBM QRadar Incident Forensics=7.3.1-p1
IBM QRadar Incident Forensics=7.3.1-p2
IBM QRadar Incident Forensics=7.3.1-p3
IBM QRadar Incident Forensics=7.3.1-p4
Remediation
Patch Available
Event History
Dec 5, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1568?
CVE-2018-1568 is classified as a medium severity vulnerability.
2
How do I fix CVE-2018-1568?
To fix CVE-2018-1568, update IBM QRadar Incident Forensics to version 7.3.1 or later.
3
What versions of IBM QRadar are affected by CVE-2018-1568?
CVE-2018-1568 affects IBM QRadar Incident Forensics version 7.2.0 to 7.2.8 and 7.3.0 to 7.3.1.
4
What type of vulnerability is CVE-2018-1568?
CVE-2018-1568 is a local file disclosure vulnerability.
5
Can CVE-2018-1568 lead to data exposure?
Yes, CVE-2018-1568 can allow unauthorized users to read locally stored web pages, potentially leading to data exposure.