What is the severity of CVE-2016-2872?

CVE-2016-2872 is rated as a medium severity vulnerability, allowing unauthorized file access.

How do I fix CVE-2016-2872?

To fix CVE-2016-2872, upgrade to IBM Security QRadar SIEM version 7.2.7 or later.

Which versions of IBM Security QRadar are affected by CVE-2016-2872?

CVE-2016-2872 affects IBM Security QRadar SIEM versions 7.2.0 through 7.2.6 and QRadar Incident Forensics versions 7.2.0 through 7.2.6.

Can CVE-2016-2872 be exploited remotely?

Yes, CVE-2016-2872 can be exploited remotely via crafted URLs by attackers.

What impact does CVE-2016-2872 have on systems?

CVE-2016-2872 allows attackers to read arbitrary files on the affected systems, potentially leading to sensitive information disclosure.

Vulnerability/
CVE-2016-2872

medium

5.3

CWE

2/7/2016

5/8/2024

CVE-2016-2872: Path Traversal

First published: Sat Jul 02 2016(Updated: )

Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL.

Credit: psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM QRadar Security Information and Event Manager	=7.2.0
IBM QRadar Security Information and Event Manager	=7.2.1
IBM QRadar Security Information and Event Manager	=7.2.2
IBM QRadar Security Information and Event Manager	=7.2.3
IBM QRadar Security Information and Event Manager	=7.2.4
IBM QRadar Security Information and Event Manager	=7.2.5
IBM QRadar Security Information and Event Manager	=7.2.6
IBM Security QRadar Incident Forensics	=7.2.0
IBM Security QRadar Incident Forensics	=7.2.1
IBM Security QRadar Incident Forensics	=7.2.2
IBM Security QRadar Incident Forensics	=7.2.3
IBM Security QRadar Incident Forensics	=7.2.4
IBM Security QRadar Incident Forensics	=7.2.5
IBM Security QRadar Incident Forensics	=7.2.6

Never miss a vulnerability like this again

Reference Links

http://www-01.ibm.com/support/docview.wss?uid=swg21985775

Frequently Asked Questions

What is the severity of CVE-2016-2872?
CVE-2016-2872 is rated as a medium severity vulnerability, allowing unauthorized file access.
How do I fix CVE-2016-2872?
To fix CVE-2016-2872, upgrade to IBM Security QRadar SIEM version 7.2.7 or later.
Which versions of IBM Security QRadar are affected by CVE-2016-2872?
CVE-2016-2872 affects IBM Security QRadar SIEM versions 7.2.0 through 7.2.6 and QRadar Incident Forensics versions 7.2.0 through 7.2.6.
Can CVE-2016-2872 be exploited remotely?
Yes, CVE-2016-2872 can be exploited remotely via crafted URLs by attackers.
What impact does CVE-2016-2872 have on systems?
CVE-2016-2872 allows attackers to read arbitrary files on the affected systems, potentially leading to sensitive information disclosure.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/author
agent/references
agent/severity
agent/description
agent/tags
agent/first-publish-date
agent/event
agent/source
vendor/ibm
canonical/ibm qradar security information and event manager
version/ibm qradar security information and event manager/7.2.0
version/ibm qradar security information and event manager/7.2.1
version/ibm qradar security information and event manager/7.2.2
version/ibm qradar security information and event manager/7.2.3
version/ibm qradar security information and event manager/7.2.4
version/ibm qradar security information and event manager/7.2.5
version/ibm qradar security information and event manager/7.2.6
canonical/ibm security qradar incident forensics
version/ibm security qradar incident forensics/7.2.0
version/ibm security qradar incident forensics/7.2.1
version/ibm security qradar incident forensics/7.2.2
version/ibm security qradar incident forensics/7.2.3
version/ibm security qradar incident forensics/7.2.4
version/ibm security qradar incident forensics/7.2.5
version/ibm security qradar incident forensics/7.2.6

Frequently Asked Questions

What is the severity of CVE-2016-2872?
CVE-2016-2872 is rated as a medium severity vulnerability, allowing unauthorized file access.
How do I fix CVE-2016-2872?
To fix CVE-2016-2872, upgrade to IBM Security QRadar SIEM version 7.2.7 or later.
Which versions of IBM Security QRadar are affected by CVE-2016-2872?
CVE-2016-2872 affects IBM Security QRadar SIEM versions 7.2.0 through 7.2.6 and QRadar Incident Forensics versions 7.2.0 through 7.2.6.
Can CVE-2016-2872 be exploited remotely?
Yes, CVE-2016-2872 can be exploited remotely via crafted URLs by attackers.
What impact does CVE-2016-2872 have on systems?
CVE-2016-2872 allows attackers to read arbitrary files on the affected systems, potentially leading to sensitive information disclosure.

CVE-2016-2872: Path Traversal

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-2872?

How do I fix CVE-2016-2872?

Which versions of IBM Security QRadar are affected by CVE-2016-2872?

Can CVE-2016-2872 be exploited remotely?

What impact does CVE-2016-2872 have on systems?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2016-2872?

How do I fix CVE-2016-2872?

Which versions of IBM Security QRadar are affected by CVE-2016-2872?

Can CVE-2016-2872 be exploited remotely?

What impact does CVE-2016-2872 have on systems?