Cross site request forgery (csrf)

2019-07-2515:15:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159132.

CPENameOperatorVersion
qradar_security_information_and_event_managereq7.2.8 p2
qradar_security_information_and_event_managereq7.2.8 p1
qradar_security_information_and_event_managereq7.2.8 p5
qradar_security_information_and_event_managereq7.2.8 p6
qradar_security_information_and_event_managereq7.2.8 p3
qradar_security_information_and_event_managereq7.2.8 p4
qradar_security_information_and_event_managerge7.2.0
qradar_security_information_and_event_managerlt7.2.8
qradar_security_information_and_event_managereq7.2.8 p7
qradar_security_information_and_event_managereq7.2.8 p8

Name	Operator	Version
qradar_security_information_and_event_manager	eq	7.2.8 p2
qradar_security_information_and_event_manager	eq	7.2.8 p1
qradar_security_information_and_event_manager	eq	7.2.8 p5
qradar_security_information_and_event_manager	eq	7.2.8 p6
qradar_security_information_and_event_manager	eq	7.2.8 p3
qradar_security_information_and_event_manager	eq	7.2.8 p4
qradar_security_information_and_event_manager	ge	7.2.0
qradar_security_information_and_event_manager	lt	7.2.8
qradar_security_information_and_event_manager	eq	7.2.8 p7
qradar_security_information_and_event_manager	eq	7.2.8 p8