CVE-2015-1996

CVE-2015-1996 describes a vulnerability in IBM Security QRadar Incident Forensics versions 7.2.x before 7.2.5 Patch 5, where the software fails to prevent caching of HTTPS responses. This allows a physically proximate attacker to gain sensitive information from an unattended workstation's local cache. The vulnerability has a low CVSS score of 2.1, indicating low severity with local access and low attack complexity, resulting in a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.