Security Bulletin: IBM QRadar SIEM is vulnerable to path traversal attack. (CVE-2015-2007)

Summary A Path Traversal attack aims to access files and directories that are stored outside the web root folder. Vulnerability Details CVE-ID: CVE-2015-2007 Description: IBM QRadar could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL...

CVE-2015-2007

CVE-2015-2007 affects IBM QRadar SIEM 7.2.x prior to 7.2.5 Patch 6. The vulnerability is a directory traversal flaw that could allow a remote authenticated user to read arbitrary files via a specially crafted URL. The IBM advisory confirms the affected product (QRadar SIEM) and the attack vector,...