Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2022-34351: IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: ...
CVE-2022-34351 · published 3 years ago
Summary
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.
What to do
- Update ibm qradar_security_information_and_event_manager to version 7.4.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | qradar_security_information_and_event_manager |
>= 7.4.0, < 7.4.3 7.4.3 7.5.0 cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* |
Original advisory text
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: ...
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/230402 VDB Entry Vendor Advisory
- https://www.ibm.com/support/pages/node/6955059 Patch Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-200Information Exposure
CWE-312Cleartext Storage of Sensitive Information
Timeline
Published17 Feb 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-34351 · NVD
Track software like this
Free during beta