CVE-2022-34351: IBM QRadar SIEM information disclosure

Q: What is the severity of CVE-2022-34351?

The severity of CVE-2022-34351 is high, with a severity value of 7.5.

Q: What is affected by CVE-2022-34351?

IBM QRadar SIEM versions 7.4.0 - 7.4.3 Fix Pack 7 and 7.5.0 - 7.5.0 Update Pack 3 are affected by CVE-2022-34351.

Q: How can a non-tenant user exploit CVE-2022-34351?

A non-tenant user with a specific domain security profile assigned can exploit CVE-2022-34351 to view some data from other domains.

Q: Is Linux affected by CVE-2022-34351?

No, Linux is not affected by CVE-2022-34351.

Q: Where can I find more information about CVE-2022-34351?

You can find more information about CVE-2022-34351 at the following references: [IBM X-Force ID: 230402](https://exchange.xforce.ibmcloud.com/vulnerabilities/230402) and [IBM Support](https://www.ibm.com/support/pages/node/6955059).

Published Feb 13, 2023

Updated

IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.

Other sources

IBM QRadar SIEM is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains.

Affected Software

16 affected components

IBM QRadar Security Information and Event Manager>=7.4.0<7.4.3

IBM QRadar Security Information and Event Manager=7.4.3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_2

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_4

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_5

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_6

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_7

IBM QRadar Security Information and Event Manager=7.5.0

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_3

Linux Linux kernel

IBM QRadar SIEM<=7.4.0 - 7.4.3 Fix Pack 7

IBM QRadar SIEM<=7.5.0 - 7.5.0 Update Pack 3

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6955059

Event History

Feb 13, 2023

CVE Published

12:00 AM

Feb 17, 2023

CVE Published

via MITRE·06:40 PM

Data Sourced

via MITRE·06:40 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6955059

Frequently Asked Questions

What is the severity of CVE-2022-34351?

The severity of CVE-2022-34351 is high, with a severity value of 7.5.

What is affected by CVE-2022-34351?