Security Bulletin: IBM QRadar Incident Forensics is vulnerable to a cacheable SSL Page issue. (CVE-2015-1996)

Summary

Cacheable SSL pages exist in QRadar Incident Forensics

Vulnerability Details

CVE-ID: CVE-2015-1996

Description: IBM QRadar Incident Forensics could allow a local user to obtain sensitive information due to cacheable SSL pages that have been stored locally.

CVSS Base Score: 2.1 **CVSS Temporal Score:**See https://exchange.xforce.ibmcloud.com/vulnerabilities/103906 for the current score **CVSS Environmental Score:***Undefined CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected Products and Versions

· IBM QRadar Incident Forensics 7.2.n

Remediation/Fixes

· IBM QRadar/QRM/QVM/QRIF 7.2.5 Patch 5

Workarounds and Mitigations

None