NetSight
medium5.5

CVE-2022-22424

IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions.

Impact

IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
from 7.3.0 before 7.3.3
from 7.4.0 before 7.4.3
Versions 7.3.3, 7.4.3, 7.5.0

Weakness classification

References