Listen to this Post
How the CVE Works
CVE-2025-36050 affects IBM QRadar SIEM versions 7.5 through 7.5.0 Update Package 12. The vulnerability arises due to improper handling of sensitive information in log files. A local attacker with read access to these logs can extract confidential data, such as system metrics or configuration details, which may facilitate further exploitation. The logs inadvertently store this information in plaintext or insufficiently protected formats, exposing it to unauthorized users. IBM has classified this as an information disclosure flaw with moderate severity due to the requirement of local access.
DailyCVE Form
Platform: IBM QRadar SIEM
Version: 7.5 – 7.5.0 UP12
Vulnerability: Information Disclosure
Severity: Medium
Date: 07/25/2025
Prediction: Patch by Q3 2025
What Undercode Say
Analytics:
grep -r "sensitive_metric" /var/log/qradar/ cat /opt/qradar/conf/metrics.log | less
Exploit:
Local log file read:
cat /var/log/qradar/system_errors.log
Protection from this CVE:
- Restrict log file permissions
- Apply IBM QRadar patches
- Encrypt sensitive logs
Impact:
Unauthorized data leakage
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
