Lucene search
HistorySep 28, 2022 - 4:15 p.m.
CVE-2022-36771
ibm qradar
user behavior analytics
authenticated user
data access
vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
35.0%
IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791.
Affected configurations
Node
ibmqradar_user_behavior_analyticsRange<4.1.9
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_user_behavior_analytics | * | cpe:2.3:a:ibm:qradar_user_behavior_analytics:*:*:*:*:*:*:*:* |
Related
ibm
ibm
prion
prion
Information disclosure
2022-09-28 16:15:00
cnvd
cnvd
IBM QRadar User Behavior Analytics has an unspecified vulnerability
2022-09-29 00:00:00
cvelist
cvelist
CVE-2022-36771
2022-09-28 15:55:16
cve
cve
CVE-2022-36771
2022-09-28 16:15:12
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
35.0%
Related for NVD:CVE-2022-36771