CVE-2018-1612 describes an authentication bypass vulnerability in IBM QRadar Incident Forensics (versions 7.2 and 7.3) that could allow a remote attacker to gain unauthorized access and sensitive information. With a CVSS score of 5.8 (Medium), this vulnerability is remotely exploitable with low attack complexity, potentially leading to information disclosure. While not on the CISA KEV catalog, exploit code, including a Metasploit module for Remote Code Execution, is publicly available, indicating a higher likelihood of exploitation. Despite the availability of exploit code, there is no recorded community discussion or media coverage for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 7.2.0, <= 7.2.8CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* | ||
7.2.8CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:* | ||
7.2.8CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:* | ||
7.2.8CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:* | ||
7.2.8CPE matchmatch criteria | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.