php: Invalid read in exif_process_SOFn()

An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exifprocessSOFn...

QRadar Community Edition 7.3.1.6 PHP Object Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ PHP object injection vulnerability in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...

QRadar Community Edition 7.3.1.6 Insecure File Permissions Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Local privilege escalation in QRadar due to run-result-reader.sh insecure file permissions ------------------------------------------------------------------------ Abstra...

QRadar Community Edition 7.3.1.6 Insecure File Permissions

------------------------------------------------------------------------ Local privilege escalation in QRadar due to run-result-reader.sh insecure file permissions ------------------------------------------------------------------------ Yorick Koster, September 2019...

Security Bulletin: IBM QRadar SIEM is vulnerable to improper input validation (CVE-2020-4151)

Summary IBM QRadar SIEM is vulnerable to improper input validation, allowing an authenticated attacker to perform unauthorized actions Vulnerability Details CVEID: CVE-2020-4151 DESCRIPTION: IBM QRadar could allow an authenticated attacker to perform unauthorized actions due to improper input...

CVE-2020-4294

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404...

CVE-2020-4271

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897...

CVE-2020-4271

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897...

CVE-2020-4270

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. IBM X-ForceID: 175846...

CVE-2019-4594

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID:...

Cross site scripting

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841...

CVE-2020-4274

IBM QRadar SIEM (7.3.0–7.3.3 Patch 2) suffers an authorization bypass where an authenticated user can access data and perform unauthorized actions due to inadequate permission checks in the Forensics/web context. The IBM bulletin lists remediation options: upgrade to QRadar/QRM/QVM/QNI 7.4.0 GA a...

CVE-2020-4294

IBM QRadar SIEM (7.3.0–7.3.3 Patch 2) is vulnerable to Server-Side Request Forgery via the RssFeedItem component due to missing URL validation, potentially allowing an authenticated attacker to send unauthorized requests from the appliance (network enumeration or further attacks). Root cause: lac...

CVE-2020-4272

CVE-2020-4272 affects IBM QRadar SIEM, specifically versions 7.3.0 through 7.3.3 Patch 2. The issue arises from an arbitrary object instantiation vulnerability in the QRadar Forensics web application that can be triggered by user-supplied input, allowing a remote attacker to include arbitrary fil...

CVE-2020-4271

CVE-2020-4271 affects IBM QRadar SIEM (7.3.0–7.3.3 Patch 2). A PHP object injection in the QRadar web application can be triggered by an authenticated user via crafted input (cookie), allowing execution of arbitrary commands with the privileges of the Apache user and lower-privilege context. Affe...

CVE-2020-4268

CVE-2020-4268 affects IBM QRadar SIEM, specifically versions 7.3.0–7.3.3 Patch 2 . The vulnerability is a cross-site scripting (XSS) flaw in the Web UI that can let an attacker inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The root cause is a...

CVE-2020-4269

Summary: CVE-2020-4269 affects IBM QRadar 7.3.0–7.3.3 Patch 2 and involves hard-coded credentials used for inbound authentication, outbound communication to external components, or encryption of internal data. The root issue is the presence of embedded credentials that can compromise confidential...

CVE-2020-4268

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841...

CVE-2019-4594

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-ForceID:...

CVE-2019-4593

IBM QRadar SIEM is vulnerable to information disclosure under CVE-2019-4593. The issue arises from an error message that leaks sensitive information, enabling potential follow-on attacks. Affected products/versions are IBM QRadar 7.3.0 through 7.3.3, including Patch 1 and Patch 2 for 7.3.3. The I...