Lucene search
HistoryJan 30, 2014 - 5:17 a.m.
CVE-2014-0838
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.006
Percentile
79.2%
The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server.
Affected configurations
Node
ibmqradar_security_information_and_event_managerRange≤7.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_security_information_and_event_manager | * | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2014-01-30 05:17:00
cve
cve
CVE-2014-0838
2014-01-30 05:17:46
cvelist
cvelist
CVE-2014-0838
2014-01-30 02:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.006
Percentile
79.2%
Related for NVD:CVE-2014-0838