CVE-2019-4654

IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a…

Low · published April 15, 2020

CVSS v3.0
3.7
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. IBM X-ForceID: 170965.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/C:L/AC:H/PR:N/UI:N/AV:N/I:N/A:N/S:U/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.5th percentile
Published
2020-04-15T15:13Z
EPSS history
Timeline
  • 15 APR 15:13Z
    IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusted entity by using a…
    cvelistv5