Code injection

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846...

CVE-2020-4270

CVE-2020-4270 affects IBM QRadar SIEM 7.3.0–7.3.3 Patch 2. The root cause is weak file permissions on the run-result-reader.sh script, which is owned by nobody and executed by the root crontab. The combination with a web-application code-execution vulnerability could allow a local user to escalat...