IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information by reading a configuration file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qradar_security_information_and_event_manager | Ibm | * | 7.1.0 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.0 (including) | 7.2.0 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.1 (including) | 7.2.1 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.2 (including) | 7.2.2 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.3 (including) | 7.2.3 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.4 (including) | 7.2.4 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.5 (including) | 7.2.5 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.2.6 (including) | 7.2.6 (including) |