CVE-2015-1999

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive…

published November 8, 2015

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01209 · 68.2th percentile
Published
2015-11-08T22:00Z
EPSS history
Timeline
  • 08 NOV 22:00Z
    IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive…
    cvelistv5