Lucene search

K
ibmIBM1B1BE6640A37E9C289CDE25810DE0EFEBFF591C7E7D0B82B764AECF5067CDD75
HistoryDec 20, 2019 - 8:47 a.m.

Security Bulletin: IBM QRadar Advisor With Watson is vulnerable to Hazardous Input Validation in some cases

2019-12-2008:47:33
www.ibm.com
6

0.001 Low

EPSS

Percentile

19.8%

Summary

IBM QRadar Advisor With Watson in some cases does not limit the length of user input strings

Vulnerability Details

CVEID:CVE-2019-4556
DESCRIPTION:
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166205 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
Qradar Advisor 1.0.0 - 2.4.0

Remediation/Fixes

QRadar Advisor With Watson 2.4.1

Workarounds and Mitigations

QRadar Advisor With Watson 2.4.1

CPENameOperatorVersion
ibm security qradar siemeq2.4.0

0.001 Low

EPSS

Percentile

19.8%

Related for 1B1BE6640A37E9C289CDE25810DE0EFEBFF591C7E7D0B82B764AECF5067CDD75