CVE-2020-4486: High severity IBM QRadar Security Information and Event Manager vulnerability
Published Aug 11, 2020
·Updated
IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM X-Force ID: 181861.
Affected Software
1 affected component
IBM QRadar Security Information and Event Manager>=7.2.0<=7.2.9
Event History
Aug 11, 2020
CVE Published
via MITRE·12:05 PM
Data Sourced
via MITRE·12:05 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-4486.
2
What is the severity of CVE-2020-4486?
The severity of CVE-2020-4486 is high with a CVSS score of 8.1.
3
Which version of IBM QRadar is affected by CVE-2020-4486?
IBM QRadar versions 7.2.0 through 7.2.9 are affected by CVE-2020-4486.
4
How does CVE-2020-4486 impact IBM QRadar?
CVE-2020-4486 allows an authenticated user to overwrite or delete arbitrary files in IBM QRadar after WinCollect installation.
5
Is there a patch or fix available for CVE-2020-4486?
Please refer to the IBM support page for guidance on how to mitigate or fix the vulnerability.