CVE-2022-22480
First published: Thu Sep 29 2022(Updated: )
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM QRadar Security Information and Event Manager | >=7.4.0<7.4.3 | |
| IBM QRadar Security Information and Event Manager | =7.4.3 | |
| IBM QRadar Security Information and Event Manager | =7.4.3-fix_pack_1 | |
| IBM QRadar Security Information and Event Manager | =7.4.3-fix_pack_2 | |
| IBM QRadar Security Information and Event Manager | =7.4.3-fix_pack_3 | |
| IBM QRadar Security Information and Event Manager | =7.4.3-fix_pack_4 | |
| IBM QRadar Security Information and Event Manager | =7.4.3-fix_pack_5 | |
| IBM QRadar Security Information and Event Manager | =7.4.3-fix_pack_6 | |
| IBM QRadar Security Information and Event Manager | =7.5.0 | |
| IBM QRadar Security Information and Event Manager | =7.5.0-update_pack_1 | |
| IBM QRadar Security Information and Event Manager | =7.5.0-update_pack_2 | |
| Linux Linux kernel | ||
| IBM QRadar SIEM | <=7.4.0 - 7.4.3 Fix Pack 6 | |
| IBM QRadar SIEM | <=7.5.0 - 7.5.0 Update Pack 2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-22480.
What is the title of the vulnerability?
The title of the vulnerability is "IBM QRadar SIEM data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure".
What is the severity of CVE-2022-22480?
The severity of CVE-2022-22480 is high.
Which versions of IBM QRadar SIEM are affected by CVE-2022-22480?
IBM QRadar SIEM versions 7.4.0 to 7.4.3 Fix Pack 6 and 7.5.0 to 7.5.0 Update Pack 2 are affected by CVE-2022-22480.
How can I fix CVE-2022-22480?
To fix CVE-2022-22480, upgrade to IBM QRadar SIEM version 7.4.3 Fix Pack 6 or later, or 7.5.0 Update Pack 2 or later.
- collector/nvd-index
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/remedy
- agent/author
- agent/severity
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm qradar security information and event manager
- version/ibm qradar security information and event manager/7.4.0
- version/ibm qradar security information and event manager/7.4.3
- version/ibm qradar security information and event manager/7.4.3-fix_pack_1
- version/ibm qradar security information and event manager/7.4.3-fix_pack_2
- version/ibm qradar security information and event manager/7.4.3-fix_pack_3
- version/ibm qradar security information and event manager/7.4.3-fix_pack_4
- version/ibm qradar security information and event manager/7.4.3-fix_pack_5
- version/ibm qradar security information and event manager/7.4.3-fix_pack_6
- version/ibm qradar security information and event manager/7.5.0
- version/ibm qradar security information and event manager/7.5.0-update_pack_1
- version/ibm qradar security information and event manager/7.5.0-update_pack_2
- vendor/linux
- canonical/linux linux kernel
- canonical/ibm qradar siem
- version/ibm qradar siem/7.4.0 - 7.4.3 fix pack 6
- version/ibm qradar siem/7.5.0 - 7.5.0 update pack 2