Lucene search
IbmCVE-2014-0835HistoryJan 30, 2014 - 5:17 a.m.
CVE-2014-0835
2014-01-3005:17:46
CWE-352
ibm
web.nvd.nist.gov
29
cve-2014-0835
cross-site request forgery
csrf
ibm security qradar siem
authentication hijacking
console auto update settings
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
66.2%
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
Affected configurations
Node
ibmqradar_security_information_and_event_managerRange≤7.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_security_information_and_event_manager | * | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-0835
2014-01-30 02:00:00
nvd
nvd
CVE-2014-0835
2014-01-30 05:17:46
prion
prion
Cross site request forgery (csrf)
2014-01-30 05:17:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
66.2%
Related for CVE-2014-0835