Vulnerability · Published Apr 15, 2020 · Assigned by ibm

CVE-2020-4271

Medium 6.3

In plain English

A medium-severity security flaw in Qradar from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).

Severity (CVSS 3.0)6.3Medium

Exploit odds (30 days)1.7%top 22.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.

Affected products (as reported)

Vendor	Product	Versions
IBM	Qradar	7.3.3.Patch2
IBM	QRadar	7.3.0

References

https://www.ibm.com/support/pages/node/6189651 x_refsource_CONFIRM
ibm-qradar-cve20204271-command-exec (175897) vdb-entry, x_refsource_XF
20200421 PHP object injection vulnerability in QRadar Forensics web application mailing-list, x_refsource_FULLDISC
http://packetstormsecurity.com/files/157336/QRadar-Community-Edition-7.3.1.6-PHP-Object-Injection.html x_refsource_MISC