CVE-2015-1999 | BDVDB-2026-72723 Detail

Description#

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21968269

Exploit#

No public exploit known

History#

Version 12015-11-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.