Vulnerability Description
IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Qradar Security Information And Event Manager | >= 7.3.0, < 7.3.3 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192539VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6472891PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192539VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6472891PatchVendor Advisory
FAQ
What is CVE-2020-4980?
CVE-2020-4980 is a vulnerability with a CVSS score of 6.5 (MEDIUM). IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.
How severe is CVE-2020-4980?
CVE-2020-4980 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-4980?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Qradar Security Information And Event Manager, Linux Linux Kernel.