IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 mishandles authorization, which allows remote authenticated users to obtain sensitive information via unspecified vectors.Referenceshttp://www-01.ibm.com/support/docview.wss?uid=swg21987771http://www.securityfocus.com/bid/95003
