CVE-2017-1723

Summary

IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812.

Affected Software

VendorProductVersion RangeStatus
IBMSecurity QRadar SIEM7.2affected
IBMSecurity QRadar SIEM7.3affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References