Security Bulletin: IBM QRadar SIEM is vulnerable to path traversal attack. (CVE-2015-2007)

Summary

A Path Traversal attack aims to access files and directories that are stored outside the web root folder.

Vulnerability Details

CVE-ID: CVE-2015-2007 **
Description:IBM QRadar could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. **
CVSS Base Score: 4.0**
CVSS Temporal Score:** See https://exchange.xforce.ibmcloud.com/vulnerabilities/103914 for the current score**
CVSS Environmental Score:** Undefined*
CVSS Vector:** AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected Products and Versions

· IBM QRadar SIEM 7.2.n

Remediation/Fixes

· IBM QRadar/QRM/QVM/QRIF 7.2.5 Patch 6

Workarounds and Mitigations

None