Security Bulletin: IBM QRadar Incident Forensics is vulnerable to improper authentication. (CVE-2016-2968)

Summary

Improper Authentication in QRadar Incident Forensics

Vulnerability Details

CVE-ID: CVE-2016-2968 **
Description:IBM QRadar does not perform or incorrectly performs an authorization check allowing users access to data they don’t normally have permissions to see. **
CVSS Base Score: 6.5**
CVSS Temporal Score:** See https://exchange.xforce.ibmcloud.com/vulnerabilities/113849 for the current score**
CVSS Environmental Score:** Undefined*
CVSS Vector:** CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected Products and Versions

• IBM QRadar Incident Forensics 7.2.n

Remediation/Fixes

• QRadar / QRM / QVM / QRIF 7.2.7

Workarounds and Mitigations

None