CVEvulnerability
CVE-2016-2881
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-254
Description
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via modified request parameters.
Affected configurations
• ibm qradar security information and event manager (<= 7.1.0)
• ibm qradar security information and event manager 7.2.0
• ibm qradar security information and event manager 7.2.1
• ibm qradar security information and event manager 7.2.2
• ibm qradar security information and event manager 7.2.3
• ibm qradar security information and event manager 7.2.4
• ibm qradar security information and event manager 7.2.5
• ibm qradar security information and event manager 7.2.6
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21987777 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21987777 Patch, Vendor Advisory