CVE-2022-22480: High severity IBM QRadar Security Information and Event Manager vulnerability

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2022-22480.

Q: What is the title of the vulnerability?

The title of the vulnerability is "IBM QRadar SIEM data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure".

Q: What is the severity of CVE-2022-22480?

The severity of CVE-2022-22480 is high.

Q: Which versions of IBM QRadar SIEM are affected by CVE-2022-22480?

IBM QRadar SIEM versions 7.4.0 to 7.4.3 Fix Pack 6 and 7.5.0 to 7.5.0 Update Pack 2 are affected by CVE-2022-22480.

Q: How can I fix CVE-2022-22480?

To fix CVE-2022-22480, upgrade to IBM QRadar SIEM version 7.4.3 Fix Pack 6 or later, or 7.5.0 Update Pack 2 or later.

Published Sep 29, 2022

Updated

IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889.

Other sources

IBM QRadar SIEM data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure.

— IBM

Affected Software

14 affected components

IBM QRadar Security Information and Event Manager>=7.4.0<7.4.3

IBM QRadar Security Information and Event Manager=7.4.3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_2

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_4

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_5

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_6

IBM QRadar Security Information and Event Manager=7.5.0

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2

Linux Linux kernel

IBM QRadar SIEM<=7.4.0 - 7.4.3 Fix Pack 6

IBM QRadar SIEM<=7.5.0 - 7.5.0 Update Pack 2

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6826695

Event History

Sep 29, 2022

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Oct 7, 2022

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6826695

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2022-22480.

What is the title of the vulnerability?