CVE-2022-30613: Medium severity IBM QRadar Security Information and Event Manager vulnerability
Published Sep 29, 2022
·Updated
IBM QRadar could disclose sensitive information via a local service to a privileged user.
Other sources
IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366.
Affected Software
14 affected components
IBM QRadar Security Information and Event Manager>=7.4.0<7.4.3
IBM QRadar Security Information and Event Manager=7.4.3
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_2
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_3
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_4
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_5
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_6
IBM QRadar Security Information and Event Manager=7.5.0
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2
Linux Linux kernel
IBM QRadar SIEM<=7.4.0 - 7.4.3 Fix Pack 6
IBM QRadar SIEM<=7.5.0 - 7.5.0 Update Pack 2
Remediation
Patch Available
Event History
Sep 29, 2022
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionSeverityAffected Software
Oct 7, 2022
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2022-30613.
2
What can be disclosed by this vulnerability?
This vulnerability could disclose sensitive information.
3
Who can exploit this vulnerability?
A privileged user can exploit this vulnerability.
4
Which versions of IBM QRadar SIEM are affected?
IBM QRadar SIEM versions 7.4.0 to 7.4.3 Fix Pack 6 and versions 7.5.0 to 7.5.0 Update Pack 2 are affected.
5
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium (5.5).
6
How can I fix this vulnerability?
To fix this vulnerability, update IBM QRadar SIEM to version 7.4.3 Fix Pack 6 or version 7.5.0 Update Pack 2.