CVE-2020-4294: SSRF
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404.
Other sources
IBM QRadar SIEM is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4294?
CVE-2020-4294 has a moderate severity level, as it allows authenticated attackers to potentially exploit the system via Server Side Request Forgery.
How do I fix CVE-2020-4294?
To fix CVE-2020-4294, upgrade IBM QRadar Security Information and Event Manager to version 7.3.3 Patch 3 or later.
What is Server Side Request Forgery in the context of CVE-2020-4294?
In the context of CVE-2020-4294, Server Side Request Forgery allows an attacker to send unauthorized requests from the vulnerable system, which can lead to further exploitation.
Which versions of IBM QRadar are affected by CVE-2020-4294?
IBM QRadar versions 7.3.0 to 7.3.3 Patch 2 are affected by CVE-2020-4294.
Can CVE-2020-4294 lead to other types of attacks?
Yes, CVE-2020-4294 may facilitate network enumeration and potentially lead to various other attacks when exploited.