Vulnerability · Published Apr 15, 2020 · Assigned by ibm

CVE-2020-4294

Medium 6.3

In plain English

A medium-severity security flaw in Qradar from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).

Severity (CVSS 3.0)6.3Medium

Exploit odds (30 days)1.2%top 30.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404.

Affected products (as reported)

Vendor	Product	Versions
IBM	Qradar	7.3.3.Patch2
IBM	QRadar	7.3.0

References

https://www.ibm.com/support/pages/node/6189663 x_refsource_CONFIRM
ibm-qradar-cve20204294-ssrf (176404) vdb-entry, x_refsource_XF
20200421 QRadar RssFeedItem Server-Side Request Forgery vulnerability mailing-list, x_refsource_FULLDISC
http://packetstormsecurity.com/files/157329/QRadar-Community-Edition-7.3.1.6-Server-Side-Request-Forgery.html x_refsource_MISC