CVE-2019-4508

HIGH

IBM QRadar SIEM <7.3.3 - Info Disclosure

Title source: llm

Description

IBM QRadar SIEM 7.3.0 through 7.3.3 uses weak credential storage in some instances which could be decrypted by a local attacker. IBM X-Force ID: 164429.

References (2)

Scores

CVSS v3 7.8
EPSS 0.0009
EPSS Percentile 24.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-522
Status published

Affected Products (1)

ibm/qradar_security_information_and_event_manager < 7.3.3

Timeline

Published Jan 10, 2020
Tracked Since Feb 18, 2026