Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2016-9729: IBM QRadar SIEM allows anonymous access to protected functions
CVE-2016-9729 · published 9 years ago
Summary
The QRadar Security Information and Event Manager version 7.2 lets users reach a critical part of the system without checking their identity. This means anyone could view or change sensitive security data. Apply the latest IBM patch or update to a fixed version as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | qradar_security_information_and_event_manager |
7.2.0 7.2.1 7.2.2 7.2.3 7.2.4 7.2.5 7.2.6 7.2.7 7.2.8 cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:* |
Original advisory text
IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Reference #: 1999545.
IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Reference #: 1999545.
References
- http://www.ibm.com/support/docview.wss?uid=swg21999545 Patch Vendor Advisory
- http://www.securityfocus.com/bid/96538
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-287Improper Authentication
Timeline
Published7 Mar 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-9729 · NVD
Track software like this
Free during beta