Lucene search
HistoryJan 30, 2014 - 5:17 a.m.
CVE-2014-0835
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
66.2%
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
Affected configurations
Node
ibmqradar_security_information_and_event_managerRange≤7.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_security_information_and_event_manager | * | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-0835
2014-01-30 02:00:00
prion
prion
Cross site request forgery (csrf)
2014-01-30 05:17:00
cve
cve
CVE-2014-0835
2014-01-30 05:17:46
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.003
Percentile
66.2%
Related for NVD:CVE-2014-0835