CVE-2020-4485 — IBM Qradar Security Information AND Event Manager vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 58.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Security Information AND Event ManagerIBM Qradar Wincollect
Timeline
PublishedAug 11
Latest updateMay 24

Description

IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks. IBM X-Force ID: 181860.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/qradar_wincollect7.2.0, 7.2.9+1

🔴Vulnerability Details

2
GHSA
GHSA-xg8x-7gj7-5m8c: IBM QRadar 7↗2022-05-24
▶
CVEList
CVE-2020-4485: IBM QRadar 7↗2020-08-11
▶
CVE-2020-4485 — IBM vulnerability | cvebase