First published: Thu Apr 29 2021(Updated: )
IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the system. IBM X-Force ID: 190907.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM QRadar Security Information and Event Manager | >=7.3.0<7.3.3 | |
IBM QRadar Security Information and Event Manager | >=7.4.0<7.4.2 | |
IBM QRadar Security Information and Event Manager | =7.3.3 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_1 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_2 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_3 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_4 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_5 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_6 | |
IBM QRadar Security Information and Event Manager | =7.3.3-fix_pack_7 | |
IBM QRadar Security Information and Event Manager | =7.4.2 | |
IBM QRadar Security Information and Event Manager | =7.4.2-fix_pack_1 | |
IBM QRadar Security Information and Event Manager | =7.4.2-fix_pack_2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2020-4883.
The title of this vulnerability is 'IBM QRadar SIEM could disclose sensitive information about other domains which could be used in further attacks against the system.'
The severity of CVE-2020-4883 is medium.
IBM QRadar SIEM versions 7.3 and 7.4 are affected by this vulnerability.
To fix this vulnerability, upgrade to IBM QRadar SIEM version 7.3.3 or later, or version 7.4.2 or later.