Vulnerabilities > CVE-2016-2868 - Unspecified vulnerability in IBM Qradar Security Information and Event Manager

CVSS 2.7 - LOW

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

ibm

NVD

Published: 2016-07-02

Updated: 2016-07-06

Summary

IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Qradar Security Information AND Event Manager - IBM Qradar Security Information AND Event Manager 7.0.0 IBM Qradar Security Information AND Event Manager 7.0.1 IBM Qradar Security Information AND Event Manager 7.1.0 IBM Qradar Security Information AND Event Manager 7.1.1 IBM Qradar Security Information AND Event Manager 7.1.2 IBM Qradar Security Information AND Event Manager 7.2 IBM Qradar Security Information AND Event Manager 7.2.0 IBM Qradar Security Information AND Event Manager 7.2.1 IBM Qradar Security Information AND Event Manager 7.2.2 IBM Qradar Security Information AND Event Manager 7.2.3 IBM Qradar Security Information AND Event Manager 7.2.4 IBM Qradar Security Information AND Event Manager 7.2.5 IBM Qradar Security Information AND Event Manager 7.2.6	72

References

http://www-01.ibm.com/support/docview.wss?uid=swg21985774