Code injection

2022-07-2018:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive information from the TLS key file due to incorrect file permissions. IBM X-Force ID: 223597.

CPENameOperatorVersion
qradar_security_information_and_event_managerge7.3.0
qradar_security_information_and_event_managerlt7.3.3
qradar_security_information_and_event_managerge7.4.0
qradar_security_information_and_event_managerlt7.4.3
qradar_security_information_and_event_managereq7.3.3 fixpack9
qradar_security_information_and_event_managereq7.3.3 fixpack8
qradar_security_information_and_event_managereq7.3.3 fixpack10
qradar_security_information_and_event_managereq7.3.3 fixpack11
qradar_security_information_and_event_managereq7.3.3
qradar_security_information_and_event_managereq7.3.3 fixpack1

Name	Operator	Version
qradar_security_information_and_event_manager	ge	7.3.0
qradar_security_information_and_event_manager	lt	7.3.3
qradar_security_information_and_event_manager	ge	7.4.0
qradar_security_information_and_event_manager	lt	7.4.3
qradar_security_information_and_event_manager	eq	7.3.3 fixpack9
qradar_security_information_and_event_manager	eq	7.3.3 fixpack8
qradar_security_information_and_event_manager	eq	7.3.3 fixpack10
qradar_security_information_and_event_manager	eq	7.3.3 fixpack11
qradar_security_information_and_event_manager	eq	7.3.3
qradar_security_information_and_event_manager	eq	7.3.3 fixpack1