IBM Security Bulletin: Apache Axis as used in IBM QRadar SIEM is vulnerable to a possible man in the middle attack. (CVE-2012-5784)

IBM QRadar / QRM / QVM / QRIF / QNI includes vulnerable components (e.g., framework libraries) that may be identified and exploited with automated tools.

CVE(s): CVE-2012-5784

Affected product(s) and affected version(s):

• IBM QRadar SIEM 7.2.0 – 7.2.8 Patch 15
• IBM QRadar SIEM 7.3.0 – 7.3.1 Patch 8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10794505
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/79829

The post IBM Security Bulletin: Apache Axis as used in IBM QRadar SIEM is vulnerable to a possible man in the middle attack. (CVE-2012-5784) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2Ftkqfz