Vulnerabilities > CVE-2016-2880 - Key Management Errors vulnerability in IBM Qradar Security Information and Event Manager

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

ibm

CWE-320

NVD

Published: 2017-03-01

Updated: 2017-03-09

Summary

IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Qradar Security Information AND Event Manager 7.2.7 IBM Qradar Security Information AND Event Manager 7.2.0 IBM Qradar Security Information AND Event Manager 7.2.4 IBM Qradar Security Information AND Event Manager 7.2.6 IBM Qradar Security Information AND Event Manager 7.2.1 IBM Qradar Security Information AND Event Manager 7.2.5 IBM Qradar Security Information AND Event Manager 7.2.2 IBM Qradar Security Information AND Event Manager 7.2.3	8

Common Weakness Enumeration (CWE)

CWE-320 - Key Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References