CVE-2022-22424: Medium severity IBM QRadar Security Information and Event Manager vulnerability
Published Jul 18, 2022
·Updated
IBM QRadar could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions.
Other sources
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.
Affected Software
25 affected components
IBM QRadar Security Information and Event Manager>=7.3.0<7.3.3
IBM QRadar Security Information and Event Manager>=7.4.0<7.4.3
IBM QRadar Security Information and Event Manager=7.3.3
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_1
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_10
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_11
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_2
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_3
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_4
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_5
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_6
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_7
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_8
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_9
IBM QRadar Security Information and Event Manager=7.4.3
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_2
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_3
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_4
IBM QRadar Security Information and Event Manager=7.5.0
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1
Linux Linux kernel
IBM QRadar SIEM<=7.3.0 - 7.3.3 Fix Pack 11
IBM QRadar SIEM<=7.4.0 - 7.4.3 Fix Pack 5
IBM QRadar SIEM<=7.5.0 - 7.5.0 Update Pack 1
Remediation
Patch Available
Event History
Jul 18, 2022
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionSeverityAffected Software
Jul 20, 2022
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-22424?
The severity of CVE-2022-22424 is medium with a CVSS score of 5.5.
2
Which versions of IBM QRadar are affected by CVE-2022-22424?
IBM QRadar SIEM versions 7.3, 7.4, and 7.5 are affected by CVE-2022-22424.
3
How can a local user obtain sensitive information from the TLS key file in IBM QRadar?
A local user can obtain sensitive information from the TLS key file in IBM QRadar due to incorrect file permissions.
4
What is the IBM X-Force ID for CVE-2022-22424?
The IBM X-Force ID for CVE-2022-22424 is 223597.
5
Where can I find more information about CVE-2022-22424?
You can find more information about CVE-2022-22424 on the IBM X-Force Exchange website and the IBM support pages.