CVE-2014-0837

CVE-2014-0837 describes a vulnerability in the AutoUpdate process of IBM Security QRadar SIEM 7.2 MR1 and earlier. The flaw stems from the process's failure to properly validate X.509 certificates from SSL servers, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this by presenting a crafted certificate to spoof a legitimate server, leading to potential integrity compromise (CVSS 4.3, I:P). While the attack complexity is medium and no authentication is required, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.