IBM QRadar SIEM Cleartext Transmission Vulnerability Allowing Man-in-the-Middle Data Interception

A vulnerability exists in IBM QRadar SIEM versions 7.5 through 7.5.0 UP9 IF03, where sensitive data is transmitted in cleartext. This lack of encryption could allow an unauthorized actor to intercept security-critical information using man-in-the-middle techniques.

Impact

Exploitation of this vulnerability could lead to unauthorized interception of sensitive or security-critical data.

Remediation

Users are advised to update to IBM QRadar SIEM 7.5.0 UP10. Instructions for downloading this update are available on the IBM Support Fix Central website. For QRadar Incident Forensics users, the same update to version 7.5.0 UP10 should be applied.