CVE-2019-4262
5.3
CVSS:3.0/AV:N/PR:N/I:L/AC:L/S:U/C:N/A:N/UI:N/RC:C/RL:O/E:U
Summary
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | QRadar SIEM | 7.2 | affected |
| IBM | QRadar SIEM | 7.3 | affected |
Weaknesses
- Gain Access
ADP Enrichment
CVE Program Container
Additional References
- https://www.ibm.com/support/pages/node/1074538
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160014
References
- https://www.ibm.com/support/pages/node/1074538
- https://exchange.xforce.ibmcloud.com/vulnerabilities/160014
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.