CVE-2019-4264

IBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middle techniques due to not validating or incorrectly validating a certificate. IBM X-Force ID: 160072.

Published: May 29, 2019
Updated: Apr 13, 2023
CVE: CVE-2019-4264
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

CWE-295

OWASP TOP 10:

A3 - Sensitive Data Exposure

Affected Software
References

Software	From	Fixed in
ibm / qradar_security_information_and_event_manager	7.2.8-p2	7.2.8-p2.x
ibm / qradar_security_information_and_event_manager	7.2.8-p1	7.2.8-p1.x
ibm / qradar_security_information_and_event_manager	7.2.8	7.2.8.x
ibm / qradar_security_information_and_event_manager	7.1.2	7.2.8

http://www.securityfocus.com/bid/108535
https://exchange.xforce.ibmcloud.com/vulnerabilities/160072
https://www.ibm.com/support/docview.wss?uid=ibm10885464

Vulnerability Database

289,697

CVE-2019-4264