CVE-2016-2871

HIGH

IBM QRadar SIEM < 7.1 MR2 Patch 13 and < 7.2.7 - Unprotected Password Storage

Title source: llm
STIX 2.1

Description

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94861
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21987769

Scores

CVSS v3 7.8
EPSS 0.0031
EPSS Percentile 23.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-255
Status published
Products (8)
ibm/qradar_security_information_and_event_manager 7.2.0
ibm/qradar_security_information_and_event_manager 7.2.1
ibm/qradar_security_information_and_event_manager 7.2.2
ibm/qradar_security_information_and_event_manager 7.2.3
ibm/qradar_security_information_and_event_manager 7.2.4
ibm/qradar_security_information_and_event_manager 7.2.5
ibm/qradar_security_information_and_event_manager 7.2.6
ibm/qradar_security_information_and_event_manager < 7.1.0
Published Nov 30, 2016
Tracked Since Feb 18, 2026