CVE-2023-26279

CWE-1163 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 97.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Wincollect AgentIBM Qradar Wincollect
Timeline
PublishedNov 24

Description

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/qradar_wincollect_agent10.0 — 10.1.7
▶NVDibm/qradar_wincollect10.0 — 10.1.7

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rc4r-c73w-wxqx: IBM QRadar WinCollect Agent 10↗2023-11-24
▶
CVEList
IBM QRadar WinCollect Agent improper output encoding↗2023-11-23
▶
CVE-2023-26279 (HIGH CVSS 7.8) | IBM QRadar WinCollect Agent 10.0 th | cvebase.io