Code injection

2021-05-0516:15:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.2%

JSON

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538.

CPENameOperatorVersion
qradar_security_information_and_event_managerge7.3.0
qradar_security_information_and_event_managerlt7.3.3
qradar_security_information_and_event_managereq7.3.3
qradar_security_information_and_event_managereq7.4.2
qradar_security_information_and_event_managereq7.4.2 fixpack1
qradar_security_information_and_event_managereq7.4.2 fixpack2
qradar_security_information_and_event_managereq7.3.3 fixpack1
qradar_security_information_and_event_managereq7.3.3 fixpack2
qradar_security_information_and_event_managereq7.3.3 fixpack3
qradar_security_information_and_event_managereq7.3.3 fixpack4

Name	Operator	Version
qradar_security_information_and_event_manager	ge	7.3.0
qradar_security_information_and_event_manager	lt	7.3.3
qradar_security_information_and_event_manager	eq	7.3.3
qradar_security_information_and_event_manager	eq	7.4.2
qradar_security_information_and_event_manager	eq	7.4.2 fixpack1
qradar_security_information_and_event_manager	eq	7.4.2 fixpack2
qradar_security_information_and_event_manager	eq	7.3.3 fixpack1
qradar_security_information_and_event_manager	eq	7.3.3 fixpack2
qradar_security_information_and_event_manager	eq	7.3.3 fixpack3
qradar_security_information_and_event_manager	eq	7.3.3 fixpack4