Lucene search
IbmCVE-2015-1996HistoryNov 08, 2015 - 10:59 p.m.
CVE-2015-1996
2015-11-0822:59:05
CWE-200
ibm
web.nvd.nist.gov
22
ibm
security
qradar
incident forensics
patch
vulnerability
https
cache
attack
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0
Percentile
12.6%
IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which allows physically proximate attackers to obtain sensitive local-cache information by leveraging an unattended workstation.
Affected configurations
Node
ibmsecurity_qradar_incident_forensicsMatch7.2.0
ORibmsecurity_qradar_incident_forensicsMatch7.2.1
ORibmsecurity_qradar_incident_forensicsMatch7.2.2
ORibmsecurity_qradar_incident_forensicsMatch7.2.3
ORibmsecurity_qradar_incident_forensicsMatch7.2.4
ORibmsecurity_qradar_incident_forensicsMatch7.2.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | security_qradar_incident_forensics | 7.2.0 | cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.0:*:*:*:*:*:*:* |
| ibm | security_qradar_incident_forensics | 7.2.1 | cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.1:*:*:*:*:*:*:* |
| ibm | security_qradar_incident_forensics | 7.2.2 | cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.2:*:*:*:*:*:*:* |
| ibm | security_qradar_incident_forensics | 7.2.3 | cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.3:*:*:*:*:*:*:* |
| ibm | security_qradar_incident_forensics | 7.2.4 | cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.4:*:*:*:*:*:*:* |
| ibm | security_qradar_incident_forensics | 7.2.5 | cpe:2.3:a:ibm:security_qradar_incident_forensics:7.2.5:*:*:*:*:*:*:* |
Related
prion
prion
Information disclosure
2015-11-08 22:59:00
ibm
ibm
cvelist
cvelist
CVE-2015-1996
2015-11-08 22:00:00
nvd
nvd
CVE-2015-1996
2015-11-08 22:59:05
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0
Percentile
12.6%
Related for CVE-2015-1996