CVE-2014-6075

No fix known EPSS 1%

IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.

Published 2014-11-28 · CVE record · OSV

Products: ibm qradar_risk_manager, ibm qradar_vulnerability_manager, ibm qradar_security_information_and_event_manager