IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6 does not properly expire sessions, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.
| Software | From | Fixed in |
|---|---|---|
| ibm / qradar_security_information_and_event_manager | 7.2.0 | 7.2.0.x |
| ibm / qradar_security_information_and_event_manager | 7.2.4 | 7.2.4.x |
| ibm / qradar_security_information_and_event_manager | 7.2.1 | 7.2.1.x |
| ibm / qradar_security_information_and_event_manager | 7.2.2 | 7.2.2.x |
| ibm / qradar_security_information_and_event_manager | 7.2.3 | 7.2.3.x |
| ibm / qradar_security_information_and_event_manager | 7.1.0 | 7.1.0.x |