Vulnerability Description
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Qradar Security Information And Event Manager | <= 7.1.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21987769PatchVendor Advisory
- http://www.securityfocus.com/bid/94861
- http://www-01.ibm.com/support/docview.wss?uid=swg21987769PatchVendor Advisory
- http://www.securityfocus.com/bid/94861
FAQ
What is CVE-2016-2871?
CVE-2016-2871 is a vulnerability with a CVSS score of 7.8 (HIGH). IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file.
How severe is CVE-2016-2871?
CVE-2016-2871 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2871?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Qradar Security Information And Event Manager.