CVE-2016-2968

MEDIUM

IBM Security QRadar Incident Forensics 7.2.x - Authentication Bypass

Title source: llm
STIX 2.1

Description

IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modify data, via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21985773

Scores

CVSS v3 6.5
EPSS 0.0081
EPSS Percentile 53.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-264
Status published
Products (7)
ibm/security_qradar_incident_forensics 7.2.0
ibm/security_qradar_incident_forensics 7.2.1
ibm/security_qradar_incident_forensics 7.2.2
ibm/security_qradar_incident_forensics 7.2.3
ibm/security_qradar_incident_forensics 7.2.4
ibm/security_qradar_incident_forensics 7.2.5
ibm/security_qradar_incident_forensics 7.2.6
Published Jul 02, 2016
Tracked Since Feb 18, 2026