Security Bulletin: IBM QRadar SIEM is vulernable to Authorization bypass (CVE-2020-4274)

Summary IBM QRadar SIEM is vulernable to Authorization bypass Vulnerability Details CVEID: CVE-2020-4274 DESCRIPTION: IBM QRadar SIEM could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. CVSS Base score: 5.4 CVSS Temporal Score: Se...

QRadar Community Edition 7.3.1.6 Authorization Bypass Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Authorization bypass in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...

CVE-2020-4274

IBM QRadar SIEM (7.3.0–7.3.3 Patch 2) suffers an authorization bypass where an authenticated user can access data and perform unauthorized actions due to inadequate permission checks in the Forensics/web context. The IBM bulletin lists remediation options: upgrade to QRadar/QRM/QVM/QNI 7.4.0 GA a...