CVE-2019-4594
Summary
| CVE | CVE-2019-4594 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-04-15 16:15:00 UTC |
| Updated | 2020-08-24 17:37:00 UTC |
| Description | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID: 167810. |
Risk And Classification
Problem Types: CWE-319
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Qradar Security Information And Event Manager | All | All | All | All |
| Application | Ibm | Qradar Security Information And Event Manager | 7.3.3 | - | All | All |
| Application | Ibm | Qradar Security Information And Event Manager | 7.3.3 | p1 | All | All |
| Application | Ibm | Qradar Security Information And Event Manager | All | All | All | All |
| Application | Ibm | Qradar Security Information And Event Manager | 7.3.3 | - | All | All |
| Application | Ibm | Qradar Security Information And Event Manager | 7.3.3 | p1 | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
| Operating System | Linux | Linux Kernel | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Bulletin: IBM QRadar SIEM is vulnerable to information exposure (CVE-2019-4594) | CONFIRM | www.ibm.com | Vendor Advisory |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | VDB Entry, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.