QRadar Community Edition 7.3.1.6 PHP Object Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ PHP object injection vulnerability in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...

CVE-2020-4271

CVE-2020-4271 affects IBM QRadar SIEM (7.3.0–7.3.3 Patch 2). A PHP object injection in the QRadar web application can be triggered by an authenticated user via crafted input (cookie), allowing execution of arbitrary commands with the privileges of the Apache user and lower-privilege context. Affe...

Security Bulletin: IBM QRadar SIEM is vulnerable to PHP object injection (CVE-2020-4271)

Summary IBM QRadar SIEM is vulnerable to PHP object injection Vulnerability Details CVEID: CVE-2020-4271 DESCRIPTION: IBM QRadar could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. CVSS Base score: 6.3 CVSS Temporal Score: See:...