CVE-2020-4932: 
IBM QRadar SIEM vulnerability analysis and mitigation

IBM QRadar SIEM versions 7.3 and 7.4 was found to contain hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data (CVE Mitre, IBM Support).

The vulnerability has been assigned a CVSS Base score of 6.2 with the vector (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating local access is required for exploitation, with low attack complexity and no privileges or user interaction needed. The vulnerability primarily impacts confidentiality with high severity (IBM Support).

The presence of hard-coded credentials in the system could potentially allow attackers to gain unauthorized access to sensitive information or system functions. The vulnerability specifically affects the system's confidentiality, while integrity and availability remain unaffected (IBM Support).

The vulnerability requires local access for exploitation, with low attack complexity and no privileges or user interaction needed. The attack vector being local (AV:L) suggests that an attacker would need some form of local access to the system to exploit this vulnerability (IBM Support).

IBM has released patches to address this vulnerability: QRadar/QRM/QVM/QRIF/QNI 7.3.3 Patch 8 and QRadar/QRM/QVM/QRIF/QNI 7.4.2 Patch 3. No workarounds or alternative mitigations are available (IBM Support).