CVE-2014-6075: IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials…

Unscored severity · published Nov 28, 2014

CVE-2014-6075

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials…

–

CVSS

1.2%

EPSS

On KEV

Description

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.2% · higher than 67% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Qradar Risk Manager · Ibm

7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 · source: NVD

Qradar Security Information And Event Manager · Ibm

7.1.0; 7.2.0; 7.2.1; 7.2.2; 7.2.3; 7.2.4 · source: NVD