CVE-2019-4654

low-risk

Published 2020-04-15

IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-ForceID: 170965.

Do I need to act?

0.12% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.8/10 Medium

NETWORK / HIGH complexity

Affected Products (4)

Qradar Security Information And Event Manager

Affected Vendors

Ibm

References (4)

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/170965

Vendor Advisory https://www.ibm.com/support/pages/node/6189723

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/170965

Vendor Advisory https://www.ibm.com/support/pages/node/6189723

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 10/34 · Low