CVSS 6.5 · Medium EPSS 2,6%
Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada ibm qradar security information and event manager. Skor CVSS 3.1 6.5 (Medium) menurut NVD.
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | qradar security information and event manager | Versi 7.3.0 |
| ibm | qradar security information and event manager | Versi 7.3.1 |
| ibm | qradar security information and event manager | Versi 7.3.1 p3 |
| ibm | qradar security information and event manager | Versi 7.3.1 p4 |
| ibm | qradar security information and event manager | Versi 7.3.1 p5 |
| ibm | qradar security information and event manager | Versi 7.3.1 p6 |
| ibm | qradar security information and event manager | Versi 7.3.2 |
| ibm | qradar security information and event manager | Versi 7.3.2 interim_fix_01 |
| ibm | qradar security information and event manager | Versi 7.3.2 interim_fix_02 |
| ibm | qradar security information and event manager | Versi 7.3.2 p1 |
| ibm | qradar security information and event manager | Versi 7.3.2 p2 |
| ibm | qradar security information and event manager | Versi 7.3.2 p3 |
| ibm | qradar security information and event manager | Versi 7.3.2 p4 |
| ibm | qradar security information and event manager | Versi 7.3.3 |
| ibm | qradar security information and event manager | Versi 7.3.3 p1 |
| ibm | qradar security information and event manager | Versi 7.3.3 p2 |
| ibm | qradar security information and event manager | Versi 7.3.3 p3 |
| ibm | qradar security information and event manager | Versi 7.3.3 p4 |
| ibm | qradar security information and event manager | Versi 7.3.3 p5 |
| ibm | qradar security information and event manager | Versi 7.4.0 |
| ibm | qradar security information and event manager | Versi 7.4.0 p1 |
| ibm | qradar security information and event manager | Versi 7.4.0 p2 |
| ibm | qradar security information and event manager | Versi 7.4.1 |
| ibm | qradar security information and event manager | Versi 7.4.1 patch1 |
| ibm | qradar security information and event manager | Versi 7.4.2 |
| ibm | qradar security information and event manager | Versi 7.4.2 p1 |