Published: 30/01/2014 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and previous versions does not verify X.509 certificates from SSL servers, which allows man-in-the-middle malicious users to spoof servers via a crafted certificate.

Affected Products