CVE-2020-4271

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user

Medium · published April 15, 2020

CVSS v3.0
6.3
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/I:L/A:L/S:U/C:L/UI:N/AV:N/AC:L/PR:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.01732 · 77.5th percentile
Published
2020-04-15T15:13Z
EPSS history
Timeline
  • 15 APR 15:13Z
    IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user
    cvelistv5