CVE-2017-1733: IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user.

Security readout for executives and security teams

IBM QRadar SIEM 7.3 may write potentially sensitive information into log files readable by a local user. The business risk is internal confidentiality exposure: credentials, operational details, or security data could be disclosed if present in those logs. The source bundle does not describe remote compromise, data modification, or service disruption. Organizations running IBM Security QRadar SIEM 7.3, especially where local shell or file access is available to users or support accounts. Sources do not list other QRadar versions or remote-only exposure. Confirm exact build and vendor advisory applicability before scoping broadly. Treat this as a moderate-priority internal exposure issue. It is most urgent for environments with shared administrative access, outsourced support access, or strict regulatory requirements around security log confidentiality. Prioritize vendor advisory review and access-control validation over emergency incident response unless internal misuse indicators exist. Mitigation focus: Review IBM support advisory swg22015243 for vendor-approved remediation.; Apply IBM-provided fixes or upgrades if the advisory names them.; Restrict local access to QRadar hosts to authorized administrators..

Prepared

Jun 1, 2026, 15:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.