Security QRadar EDR vulnerabilities
5 known vulnerabilities in Security QRadar EDR from IBM. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Security QRadar EDR: Improper Restriction of Excessive Authentication Attempts
IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security restrictions due to improper rate limiting on TOTP verification.
- 7.5 High severity
Security QRadar EDR: Inadequate Encryption Strength
IBM Security QRadar EDR 3.12 through 3.12.23 IBM Security ReaQta uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- 8.8 High severity
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session…
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
- 8.8 High severity
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session…
IBM Security QRadar EDR 3.12 through 3.12.23 does not invalidate session after a session expiration which could allow an authenticated user to impersonate another user on the system.
- 7.5 High severity
QRadar EDR: Use of a Broken or Risky Cryptographic Algorithm
IBM Security QRadar 3.12 EDR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive credential information.