Description
The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
References
- 65127 vdb-entry
- 102552 vdb-entry
- ibm-qradar-cve20140837-mitm(90680) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066
- 20140124 ADV: IBM QRadar SIEM mailing-list
- 56653 third-party-advisory