CVE-2018-2022: Infoleak
Published Jul 17, 2019
·Updated
IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 155346.
Affected Software
18 affected components
IBM QRadar Security Information and Event Manager>=7.2.0<7.2.8
IBM QRadar Security Information and Event Manager>=7.3.0<=7.3.2
IBM QRadar Security Information and Event Manager=7.2.8
IBM QRadar Security Information and Event Manager=7.2.8-p1
IBM QRadar Security Information and Event Manager=7.2.8-p10
IBM QRadar Security Information and Event Manager=7.2.8-p11
IBM QRadar Security Information and Event Manager=7.2.8-p12
IBM QRadar Security Information and Event Manager=7.2.8-p13
IBM QRadar Security Information and Event Manager=7.2.8-p14
IBM QRadar Security Information and Event Manager=7.2.8-p15
IBM QRadar Security Information and Event Manager=7.2.8-p2
IBM QRadar Security Information and Event Manager=7.2.8-p3
IBM QRadar Security Information and Event Manager=7.2.8-p4
IBM QRadar Security Information and Event Manager=7.2.8-p5
IBM QRadar Security Information and Event Manager=7.2.8-p6
IBM QRadar Security Information and Event Manager=7.2.8-p7
IBM QRadar Security Information and Event Manager=7.2.8-p8
IBM QRadar Security Information and Event Manager=7.2.8-p9
Remediation
Patch Available
Event History
Jul 17, 2019
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-2022?
The severity of CVE-2018-2022 is considered critical due to the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2018-2022?
To fix CVE-2018-2022, you should update IBM QRadar SIEM to the latest patched version.
3
Which versions of IBM QRadar SIEM are affected by CVE-2018-2022?
CVE-2018-2022 affects IBM QRadar SIEM versions 7.2.0 to 7.2.8 and 7.3.0 to 7.3.2.
4
What kind of information is disclosed in CVE-2018-2022?
CVE-2018-2022 discloses sensitive information that could facilitate further attacks on the system.
5
Is there a risk of data breach with CVE-2018-2022?
Yes, CVE-2018-2022 poses a significant risk of data breaches due to sensitive information being accessible to unauthorized users.