NetSight
low3.7

CVE-2017-1622

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate.

Impact

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-force ID: 133120.

Affected products

VendorProductAffected versions
IbmQradar Incident Forensics
from 7.2.0 before 7.2.8
from 7.3.0 before 7.3.1
Versions 7.2.8, 7.3.1

Weakness classification

References