Vulnerabilities > CVE-2016-2880 - Key Management Errors vulnerability in IBM Qradar Security Information and Event Manager

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

local

low complexity

ibm

CWE-320

NVD

Published: 2017-03-01

Updated: 2017-03-09

Summary

IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Qradar Security Information AND Event Manager 7.2.0 IBM Qradar Security Information AND Event Manager 7.2.1 IBM Qradar Security Information AND Event Manager 7.2.2 IBM Qradar Security Information AND Event Manager 7.2.3 IBM Qradar Security Information AND Event Manager 7.2.4 IBM Qradar Security Information AND Event Manager 7.2.5 IBM Qradar Security Information AND Event Manager 7.2.6 IBM Qradar Security Information AND Event Manager 7.2.7	8

Common Weakness Enumeration (CWE)

CWE-320 - Key Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References