IBM-XFORCE-248158: High severity ibm qradar wincollect vulnerability
IBM QRadar WinCollect Agent privilege escalation
Other sources
IBM QRadar WinCollect Agent 10.0 through 10.1.3 could allow a local authenticated attacker to gain elevated privileges on the system. IBM X-Force ID: 248158.
Affected Software
Event History
Frequently Asked Questions
What is the severity of IBM-XFORCE-248158?
The severity of IBM-XFORCE-248158 is high as it allows local authenticated attackers to escalate their privileges.
How do I fix IBM-XFORCE-248158?
To fix IBM-XFORCE-248158, update the IBM QRadar WinCollect Agent to version 10.1.4 or newer.
Who is affected by IBM-XFORCE-248158?
IBM-XFORCE-248158 affects users of the IBM QRadar WinCollect Agent versions 10.0 to 10.1.3.
What vulnerabilities does IBM-XFORCE-248158 exploit?
IBM-XFORCE-248158 exploits privilege escalation vulnerabilities allowing unauthorized access to system resources.
Is there a workaround for IBM-XFORCE-248158?
Currently, the recommended approach for IBM-XFORCE-248158 is to apply the available software update rather than rely on a workaround.