CVE-2023-50950: IBM QRadar information disclosure
Published Jan 17, 2024
·Updated
IBM QRadar could disclose sensitive email information in responses from offense rules.
Other sources
IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709.
— MITRE
Affected Software
9 affected components
IBM QRadar Security Information and Event Manager=7.5.0
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_2
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_3
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_4
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_5
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_6
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_7
IBM QRadar SIEM<=7.5 - 7.5.0 UP7
Remediation
Patch Available
Event History
Jan 17, 2024
CVE Published
via IBM·12:00 AM
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-50950?
The severity of CVE-2023-50950 is considered medium, affecting the confidentiality of email information.
2
How do I fix CVE-2023-50950?
To fix CVE-2023-50950, update your IBM QRadar SIEM to the latest release as recommended by IBM.
3
Which versions of IBM QRadar SIEM are affected by CVE-2023-50950?
CVE-2023-50950 affects IBM QRadar SIEM versions from 7.5 through 7.5.0 Update Pack 7.
4
What type of information is disclosed in CVE-2023-50950?
CVE-2023-50950 can disclose sensitive email information through responses generated by offense rules.
5
How can I determine if I am vulnerable to CVE-2023-50950?
You are vulnerable to CVE-2023-50950 if you are running an affected version of IBM QRadar SIEM up to 7.5.0 Update Pack 7.