CVE-2016-2881

MEDIUM

IBM QRadar SIEM < 7.1 MR2 Patch 13 / 7.2 < 7.2.7 - Unauthenticated Access Control Bypass

Title source: llm
STIX 2.1

Description

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via modified request parameters.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21987777

Scores

CVSS v3 6.5
EPSS 0.0091
EPSS Percentile 56.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-254
Status published
Products (8)
ibm/qradar_security_information_and_event_manager 7.2.0
ibm/qradar_security_information_and_event_manager 7.2.1
ibm/qradar_security_information_and_event_manager 7.2.2
ibm/qradar_security_information_and_event_manager 7.2.3
ibm/qradar_security_information_and_event_manager 7.2.4
ibm/qradar_security_information_and_event_manager 7.2.5
ibm/qradar_security_information_and_event_manager 7.2.6
ibm/qradar_security_information_and_event_manager < 7.1.0
Published Nov 30, 2016
Tracked Since Feb 18, 2026