What’s Vulnerable › Vulnerabilities

CVE-2015-2008

• Severity: medium (CVSS 4.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-02-15 · updated 2026-06-17
• Weakness: CWE-284

Description

IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allows remote authenticated administrators to obtain sensitive information by reading a backup archive.

Affected products

• IBM QRadar SIEM: 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4 (+1)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21967632
• http://www-01.ibm.com/support/docview.wss?uid=swg21967632

Get alerted when CVE-2015-2008 or the next vulnerability affects your stack