CVE-2017-1723: Path Traversal
IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1723?
CVE-2017-1723 has been rated as a high severity vulnerability due to the potential for directory traversal attacks.
How do I fix CVE-2017-1723?
To fix CVE-2017-1723, apply the appropriate security patches provided by IBM for affected versions of QRadar SIEM.
Which versions are affected by CVE-2017-1723?
CVE-2017-1723 affects IBM QRadar SIEM versions 7.2.0 through 7.2.8 and 7.3.0 through 7.3.1, along with their respective fix packs.
What could an attacker do by exploiting CVE-2017-1723?
An attacker could exploit CVE-2017-1723 to traverse directories and potentially access sensitive files on the system.
Is there a workaround for CVE-2017-1723?
Currently, there is no documented workaround for CVE-2017-1723, so applying the security updates is essential.