CVE-2020-4274: Medium severity ibm qradar security information and event manager vulnerability
IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks. IBM X-ForceID: 175980.
Other sources
IBM QRadar SIEM could allow an authenticated user to access data and perform unauthorized actions due to inadequate permission checks.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4274?
CVE-2020-4274 has been assigned a moderate severity level due to potential unauthorized data access by authenticated users.
How do I fix CVE-2020-4274?
To fix CVE-2020-4274, upgrade IBM QRadar to version 7.3.3 Patch 3 or later, which addresses the inadequate permission checks.
Who is affected by CVE-2020-4274?
CVE-2020-4274 affects IBM QRadar Security Information and Event Manager versions 7.3.0 to 7.3.3 Patch 2.
What type of vulnerability is CVE-2020-4274?
CVE-2020-4274 is an authorization vulnerability that allows authenticated users to perform unauthorized actions.
How can unauthorized users exploit CVE-2020-4274?
Unauthorized users can exploit CVE-2020-4274 by leveraging inadequate permission checks to access sensitive data.