CVE-2015-2008 affects IBM Security QRadar SIEM versions 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6. The vulnerability involves the inclusion of SSH private keys in backup operations, allowing remote authenticated administrators to access sensitive information by reading backup archives. With a CVSS score of 4.4 (Medium), this vulnerability requires high privileges and network access for exploitation, but has high confidentiality impact. The EPSS score is low at 0.0019, indicating a low probability of exploitation. There is no known active exploitation, nor are there public Metasploit, Nuclei, or ExploitDB modules. While there are three community mentions, this CVE is not on the KEV catalog and is considered inactive on the Hot List.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.1.0CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.1.0:*:*:*:*:*:*:* | ||
7.2.0CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:* | ||
7.2.1CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:* | ||
7.2.2CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:* | ||
7.2.3CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.