{"id":"CVE-2020-4980","aliases":["EUVD-2020-26227","GHSA-c6gc-m5cw-45qg"],"status":"published","title":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts...","description":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/C:H/A:N/AC:H/UI:N/I:N/S:U/PR:N/AV:A/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00271,"percentile":0.19462,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312","CWE-319"],"published":"2021-07-16T16:50:25Z","modified":"2026-06-17T03:20:51Z","products":[{"vendor":"ibm","product":"qradar"},{"vendor":"ibm","product":"qradar_security_information_and_event_manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6472891","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/192539","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4980"},{"url":"https://github.com/advisories/GHSA-c6gc-m5cw-45qg"}],"sources":{"cve":[{"id":"CVE-2020-4980","description":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.","status":"published","published":"2021-07-16T16:50:25.631Z","modified":"2024-09-16T19:19:16.965Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/C:H/A:N/AC:H/UI:N/I:N/S:U/PR:N/AV:A/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:55.797746Z"}],"euvd":[{"id":"EUVD-2020-26227","description":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.","status":"published","published":"2021-07-16T16:50:25Z","modified":"2024-09-16T19:19:16Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/C:H/A:N/AC:H/UI:N/I:N/S:U/PR:N/AV:A/E:U/RC:C/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:55:24.213258Z"}],"ghsa":[{"id":"GHSA-c6gc-m5cw-45qg","title":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts...","description":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.","status":"published","published":"2022-05-24T19:08:17Z","modified":"2023-01-27T05:03:18Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:42:12.753514Z"}],"nvd":[{"id":"CVE-2020-4980","description":"IBM QRadar SIEM 7.3 and 7.4 uses less secure methods for protecting data in transit between hosts when encrypt host connections is not enabled as well as data at rest. IBM X-Force ID: 192539.","status":"published","published":"2021-07-16T17:15:12.027Z","modified":"2026-06-17T03:20:51.25Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-312","CWE-319"],"updated_at":"2026-11-02T14:06:44.292752Z"}]}}