PT-2020-17966 · Ibm · Ibm Qradar

Yorick Koster · Published 2020-04-15 · Updated 2022-06-29 · CVE-2020-4274

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.3.0 through 7.3.3 Patch 2

Description The issue allows an authenticated user to access data and perform unauthorized actions due to inadequate permission checks.

Recommendations For IBM QRadar versions 7.3.0 through 7.3.3 Patch 2, update to a version that includes the necessary permission checks to prevent unauthorized access and actions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2020-4274

Affected Products

Ibm Qradar

References · 8

• 🔥 http://seclists.org/fulldisclosure/2020/Apr/41 · Exploit
• 🔥 http://packetstormsecurity.com/files/157338/QRadar-Community-Edition-7.3.1.6-Authorization-Bypass.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-4274 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4274 · Vendor Advisory
• https://ibm.com/support/pages/node/6189705 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/175980 · Vendor Advisory
• https://t.me/cvenotify/32377 · Telegram Post
• https://t.me/cvenotify/2797 · Telegram Post