Lucene search
HistoryNov 24, 2023 - 12:15 a.m.
CVE-2023-26279
ibm
qradar
wincollect agent
vulnerability
improper encoding
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160.
Affected configurations
Node
ibmqradar_wincollectRange10.0–10.1.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_wincollect | * | cpe:2.3:a:ibm:qradar_wincollect:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-26279 IBM QRadar WinCollect Agent improper output encoding
2023-11-23 23:39:05
prion
prion
Design/Logic Flaw
2023-11-24 00:15:00
cve
cve
CVE-2023-26279
2023-11-24 00:15:10
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-26279