CVE-2020-4980

MEDIUM

IBM QRadar SIEM 7.3-7.4 - Cleartext Transmission of Sensitive Information

Title source: llm
STIX 2.1

Description

IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.ibm.com/support/pages/node/6472891
VDB Entry, Vendor Advisory vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/192539

Scores

CVSS v3 6.5
EPSS 0.0027
EPSS Percentile 18.5%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-319 CWE-312
Status published
Products (3)
ibm/qradar_security_information_and_event_manager 7.3.3 (8 CPE variants)
ibm/qradar_security_information_and_event_manager 7.4.3
ibm/qradar_security_information_and_event_manager 7.3.0 - 7.3.3
Published Jul 16, 2021
Tracked Since Feb 18, 2026