CVE-2019-4594: Medium severity ibm qradar security information and event manager vulnerability
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID: 167810.
Other sources
IBM QRadar could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4594?
CVE-2019-4594 is considered a medium severity vulnerability that allows remote attackers to obtain sensitive information.
How do I fix CVE-2019-4594?
To fix CVE-2019-4594, update IBM QRadar to a patched version that properly enables HTTP Strict Transport Security.
What kind of attack can exploit CVE-2019-4594?
CVE-2019-4594 can be exploited through man-in-the-middle techniques to intercept sensitive information.
Which versions of IBM QRadar are affected by CVE-2019-4594?
IBM QRadar versions 7.3.0 to 7.3.3 Patch 2 are affected by CVE-2019-4594.
Is there a specific workaround for CVE-2019-4594?
There is no specific workaround for CVE-2019-4594; the recommended action is to apply the latest updates.