CVE-2020-4789

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the…

Medium · published January 27, 2021

CVSS v3.0
6.5
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/I:N/UI:N/PR:L/AC:L/S:U/C:H/A:N/AV:N/RL:O/E:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.02584 · 85.1th percentile
Published
2021-01-27T16:35Z
EPSS history
Timeline
  • 27 JAN 16:35Z
    IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the…
    cvelistv5