CVE-2020-4408 - The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby

Back Back to CVE browser

MEDIUM

The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby

Published Jul 27, 2020

4.6

MEDIUM

CVSS 3.1

EPSS 0.31%

Description

The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords during input, which could be obtained by a physical attacker nearby. IBM X-Force ID: 179536.

Affected products

Vendor IBM Product Qradar Advisor Default
n/a
- Version
  1.1
  Status
  affected
  Constraints
  -
- Version
  2.5.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Qradar Advisor

n/a

Version	Status	Constraints
1.1	affected	-
2.5.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25655
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/179536
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6252401
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25655		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/179536		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6252401		x_refsource_CONFIRMPatchVendor Advisory