High · 8.4 CVE-2023-22875 EUVD-2023-26985GHSA-x7wh-983j-jcgf

IBM Security QRadar SIEM information disclosure

Published Jan 17, 2023 · Updated Apr 4, 2025 · Assigned by ibm

Vendor: IBM Product: Security QRadar SIEM

Description

IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security QRadar SIEM	7.4, 7.5	—

Advisories 1

WID-SEC-2023-0100 IBM QRadar SIEM: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jan 16, 2023

References

https://www.ibm.com/support/pages/node/6855643 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/244356 vdb-entry