IBM SOAR QRadar Plugin App Directory Traversal Vulnerability

The IBM SOAR QRadar Plugin is a tool from International Business Machines (IBM) used to provide bi-directional messaging between IBM Security QRadar SIEM and QRadar SOAR. The IBM SOAR QRadar Plugin App suffers from a directory traversal vulnerability that can be exploited by an attacker to send a specially crafted message containing a “dot dot” sequence (/… /…) to view arbitrary files on the system.