Lucene search

PRIOn knowledge basePRION:CVE-2023-26277

HistoryMay 31, 2023 - 7:15 p.m.

Design/Logic Flaw

2023-05-3119:15:00

PRIOn knowledge base

www.prio-n.com

ibm

qradar

wincollect

agent

execution

commands

system

privileges

security

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM QRadar WinCollect Agent 10.0 though 10.1.3 could allow a local user to execute commands on the system due to execution with unnecessary privileges. IBM X-Force ID: 248156.

CPENameOperatorVersion
qradar_wincollectge10.0
qradar_wincollectle10.1.3

CPE	Name	Operator	Version
	qradar_wincollect	ge	10.0
	qradar_wincollect	le	10.1.3

References

exchange.xforce.ibmcloud.com/vulnerabilities/248156

www.ibm.com/support/pages/node/6999343