CVSS 4.9 · Medium EPSS 1,3%
Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada ibm qradar security information and event manager. Skor CVSS 3.1 4.9 (Medium) menurut NVD.
IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IBM X-Force ID: 192905.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | qradar security information and event manager | Versi 7.3.0 hingga sebelum 7.3.3 |
| ibm | qradar security information and event manager | Versi 7.4.0 hingga sebelum 7.4.2 |
| ibm | qradar security information and event manager | Versi 7.3.3 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_1 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_2 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_3 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_4 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_5 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_6 |
| ibm | qradar security information and event manager | Versi 7.3.3 fix_pack_7 |
| ibm | qradar security information and event manager | Versi 7.4.2 |
| ibm | qradar security information and event manager | Versi 7.4.2 fix_pack_1 |
| ibm | qradar security information and event manager | Versi 7.4.2 fix_pack_2 |