CVE-2014-0837

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.

🔗 References (12)

• psirt@ushttp://osvdb.org/102552
• psirt@ushttp://seclists.org/fulldisclosure/2014/Jan/166
• psirt@ushttp://secunia.com/advisories/56653
• psirt@ushttp://www-01.ibm.com/support/docview.wss?uid=swg21663066
• psirt@ushttp://www.securityfocus.com/bid/65127
• psirt@ushttps://exchange.xforce.ibmcloud.com/vulnerabilities/90680
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/102552
• af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2014/Jan/166
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/56653
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg21663066
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/65127
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/90680