CVE-2020-4486 — IBM Qradar Security Information AND Event Manager vulnerability

3 documents3 sources
Severity
8.1HIGHNVD
EPSS
0.3%
top 44.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Security Information AND Event ManagerIBM Qradar Wincollect
Timeline
PublishedAug 11
Latest updateMay 24

Description

IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM X-Force ID: 181861.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 2.8 | Impact: 5.2

Affected Packages2 packages

▶CVEListV5ibm/qradar_wincollect7.2.0, 7.2.9+1

🔴Vulnerability Details

2
GHSA
GHSA-9qx2-wch6-c3mw: IBM QRadar 7↗2022-05-24
▶
CVEList
CVE-2020-4486: IBM QRadar 7↗2020-08-11
▶
CVE-2020-4486 — IBM vulnerability | cvebase