CVE-2016-9972
Unknown
Last modified
CVE-2016-9972 is a vulnerability of currently unknown severity. IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Description
IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 120208.
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Qradar Security Information And Event Manager | 7.2.0 |
| Ibm | Qradar Security Information And Event Manager | 7.2.1 |
| Ibm | Qradar Security Information And Event Manager | 7.2.2 |
| Ibm | Qradar Security Information And Event Manager | 7.2.3 |
| Ibm | Qradar Security Information And Event Manager | 7.2.4 |
| Ibm | Qradar Security Information And Event Manager | 7.2.5 |
| Ibm | Qradar Security Information And Event Manager | 7.2.6 |
| Ibm | Qradar Security Information And Event Manager | 7.2.7 |
| Ibm | Qradar Security Information And Event Manager | 7.2.8 |
| Ibm | Qradar Security Information And Event Manager | 7.3.0 |
References
- http://www.ibm.com/support/docview.wss?uid=swg22004925Patch, Vendor Advisory
- http://www.securityfocus.com/bid/99268Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120208Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22004925Patch, Vendor Advisory
- http://www.securityfocus.com/bid/99268Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/120208Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-9972?
IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 120208.
How severe is CVE-2016-9972?
Severity scoring for CVE-2016-9972 is pending analysis.
How do I fix CVE-2016-9972?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-9963Exim before 4.87.1 might allow remote attackers to obtain th…
- CVE-2016-9964redirect() in bottle.py in bottle 0.12.10 doesn't filter a "…
- CVE-2016-9965Lack of appropriate exception handling in some receivers of …
- CVE-2016-9966Lack of appropriate exception handling in some receivers of …
- CVE-2016-9967Lack of appropriate exception handling in some receivers of …
- CVE-2016-9969In libwebp 0.5.1, there is a double free bug in libwebpmux.
- CVE-2016-9973IBM Jazz Foundation is vulnerable to cross-site scripting. T…
- CVE-2016-9975IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnera…
- CVE-2016-9976IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a …
- CVE-2016-9977IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a …
- CVE-2016-9978IBM Curam Social Program Management 5.2, 6.0, and 7.0 could …
- CVE-2016-9979IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vul…
Are you affected by CVE-2016-9972?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST