NetSight
medium4.3

CVE-2014-4832

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1…

Impact

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.

Affected products

VendorProductAffected versions
IbmQradar Risk Manager
Versions 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4
IbmQradar Vulnerability Manager
Versions 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4
IbmQradar Security Information And Event Manager
Versions 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4

Weakness classification

References