PT-2020-18094 · Ibm · Wincollect+1

Ilias Dimopoulos · Published 2020-08-11 · Updated 2020-09-23 · CVE-2020-4485

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.2.0 through 7.2.9

Description The issue allows an authenticated user to disable the Wincollect service, which could aid an attacker in bypassing security mechanisms in future attacks.

Recommendations For IBM QRadar versions 7.2.0 through 7.2.9, consider restricting access to the Wincollect service to prevent its disablement until a fix is available.

Fix

Related Identifiers

CVE-2020-4485

Affected Products

Ibm Qradar

Wincollect

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-4485 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/181860 · Vendor Advisory
• https://ibm.com/support/pages/node/6257885 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4485 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/1793 · Telegram Post