Lucene search

IbmCVE-2017-1721

HistoryApr 26, 2018 - 2:29 p.m.

CVE-2017-1721

2018-04-2614:29:00

CWE-94

ibm

web.nvd.nist.gov

ibm

security

qradar

siem

7.2

7.3

remote code execution

vulnerability

nvd

cve-2017-1721

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

5.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

40.3%

JSON

IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM X-Force ID: 134810.

Affected configurations

Nvd

Vulners

Node

ibmqradar_security_information_and_event_managerRange7.2.0–7.2.8

ibmqradar_security_information_and_event_managerMatch7.2.8

ibmqradar_security_information_and_event_managerMatch7.2.8p1

ibmqradar_security_information_and_event_managerMatch7.2.8p10

ibmqradar_security_information_and_event_managerMatch7.2.8p11

ibmqradar_security_information_and_event_managerMatch7.2.8p2

ibmqradar_security_information_and_event_managerMatch7.2.8p3

ibmqradar_security_information_and_event_managerMatch7.2.8p4

ibmqradar_security_information_and_event_managerMatch7.2.8p5

ibmqradar_security_information_and_event_managerMatch7.2.8p6

ibmqradar_security_information_and_event_managerMatch7.2.8p7

ibmqradar_security_information_and_event_managerMatch7.2.8p8

ibmqradar_security_information_and_event_managerMatch7.2.8p9

ibmqradar_security_information_and_event_managerMatch7.3.0

ibmqradar_security_information_and_event_managerMatch7.3.0p1

ibmqradar_security_information_and_event_managerMatch7.3.0p2

ibmqradar_security_information_and_event_managerMatch7.3.0p3

ibmqradar_security_information_and_event_managerMatch7.3.0p4

ibmqradar_security_information_and_event_managerMatch7.3.0p5

ibmqradar_security_information_and_event_managerMatch7.3.0p6

ibmqradar_security_information_and_event_managerMatch7.3.0p7

VendorProductVersionCPE
ibmqradar_security_information_and_event_manager*cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:*:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5:*:*:*:*:*:*
ibmqradar_security_information_and_event_manager7.2.8cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	qradar_security_information_and_event_manager	*	cpe:2.3:a:ibm:qradar_security_information_and_event_manager::::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:::::::*
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p1::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p10::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p11::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p2::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p3::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p4::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p5::::::
ibm	qradar_security_information_and_event_manager	7.2.8	cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.8:p6::::::

Rows per page:

1-10 of 211

CNA Affected

[
  {
    "product": "Security QRadar SIEM",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.2"
      },
      {
        "status": "affected",
        "version": "7.3"
      }
    ]
  }
]

References

www.ibm.com/support/docview.wss?uid=swg22015799

exchange.xforce.ibmcloud.com/vulnerabilities/134810

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

5.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

40.3%

JSON

Related for CVE-2017-1721