IBM QRadar SIEM CVE-2017-1695 Information Disclosure Vulnerability

Bugtraq ID:	107060
Class:	Design Error
CVE:	CVE-2017-1695
Remote:	Yes
Local:	No
Published:	Feb 06 2019 12:00AM
Updated:	Feb 06 2019 12:00AM
Credit:	Ron Craig, Warren Moynihan, Jonathan Fitz-Gerald, John Zuccato, Rodney Ryan, Chris Shepherd, Dmitriy Beryoza from IBM X-Force Ethical Hacking Team.
Vulnerable:	IBM QRadar Vulnerability Manager 7.3.1 Patch 4 IBM QRadar Vulnerability Manager 7.3 IBM QRadar Vulnerability Manager 7.2.8 Patch 11 IBM QRadar Vulnerability Manager 7.2.4 Patch 3 IBM QRadar Vulnerability Manager 7.2.3 Patch 4 IBM QRadar Vulnerability Manager 7.2.3 IBM QRadar Vulnerability Manager 7.2 IBM QRadar Vulnerability Manager 7.2.4 IBM QRadar Vulnerability Manager 7.2.2 IBM QRadar Vulnerability Manager 7.2.1 IBM QRadar Risk Manager 7.3.1 Patch 4 IBM QRadar Risk Manager 7.3 IBM QRadar Risk Manager 7.2.8 Patch 11 IBM QRadar Risk Manager 7.2.4 Patch 3 IBM QRadar Risk Manager 7.2.3 Patch 4 IBM QRadar Risk Manager 7.2.3 IBM QRadar Risk Manager 7.2.4 IBM QRadar Risk Manager 7.2.2 IBM QRadar Risk Manager 7.2.1 IBM QRadar Risk Manager 7.2.0 IBM QRadar Network Insights 7.3.1 Patch 4 IBM QRadar Network Insights 7.3 IBM QRadar Network Insights 7.2.8 Patch 11 IBM QRadar Network Insights 7.2 IBM QRadar Incident Forensics 7.3.1 Patch 4 IBM QRadar Incident Forensics 7.3 IBM QRadar Incident Forensics 7.2.8 Patch 11 IBM QRadar Incident Forensics 7.2.7 IBM QRadar Incident Forensics 7.2.6 Patch 2 IBM QRadar Incident Forensics 7.2.6 IBM QRadar Incident Forensics 7.2.5 Patch 3 IBM QRadar Incident Forensics 7.2.5 IBM QRadar Incident Forensics 7.2.4 Patch 1 IBM QRadar Incident Forensics 7.2.4 IBM QRadar Incident Forensics 7.2.3 IBM QRadar Incident Forensics 7.2.2 IBM QRadar Incident Forensics 7.2.1 IBM QRadar Incident Forensics 7.2 IBM QRadar 7.3.1 Patch 4 IBM QRadar 7.3 Patch 7 IBM QRadar 7.3 Patch 6 IBM QRadar 7.3 Patch 5 IBM QRadar 7.3 Patch 1 IBM QRadar 7.3 IBM QRadar 7.2.8 Patch 6 IBM QRadar 7.2.8 Patch 11 IBM QRadar 7.2.8 Patch 10 IBM QRadar 7.2
Not Vulnerable:	IBM QRadar Vulnerability Manager 7.3.1 Patch 5 IBM QRadar Vulnerability Manager 7.2.8 Patch 12 IBM QRadar Risk Manager 7.3.1 Patch 5 IBM QRadar Risk Manager 7.2.8 Patch 12 IBM QRadar Network Insights 7.3.1 Patch 5 IBM QRadar Network Insights 7.2.8 Patch 12 IBM QRadar Incident Forensics 7.3.1 Patch 5 IBM QRadar Incident Forensics 7.2.8 Patch 12 IBM QRadar 7.3.1 Patch 5 IBM QRadar 7.2.8 Patch 12

IBM QRadar SIEM CVE-2017-1695 Information Disclosure Vulnerability

IBM QRadar SIEM is prone to an local information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

The following IBM QRadar SIEM versions are vulnerable:

IBM QRadar version 7.3.0 through 7.3.1 Patch 4 and 7.2.0 through 7.2.8 Patch 11 are vulnerable.
IBM QRadar Risk Manager version 7.3.0 through 7.3.1 Patch 4 and 7.2.0 through 7.2.8 Patch 11 are vulnerable.
IBM QRadar Incident Forensics version 7.3.0 through 7.3.1 Patch 4 and 7.2.0 through 7.2.8 Patch 11 are vulnerable.
IBM QRadar Vulnerability Manager version 7.3.0 through 7.3.1 Patch 4 and 7.2.0 through 7.2.8 Patch 11 are vulnerable.
IBM QRadar Network Insights version 7.3.0 through 7.3.1 Patch 4 and 7.2.0 through 7.2.8 Patch 11 are vulnerable.

IBM QRadar SIEM CVE-2017-1695 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: IBM QRadar SIEM uses outdated hash algorithms. (CVE-2017-1695 (IBM)