Server side request forgery (ssrf)

2019-09-2615:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.9%

JSON

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.

CPENameOperatorVersion
qradar_security_information_and_event_managereq7.2.8 p2
qradar_security_information_and_event_managereq7.2.8 p1
qradar_security_information_and_event_managereq7.2.8 p5
qradar_security_information_and_event_managereq7.2.8 p6
qradar_security_information_and_event_managereq7.2.8 p3
qradar_security_information_and_event_managereq7.2.8 p4
qradar_security_information_and_event_managerge7.2.0
qradar_security_information_and_event_managerlt7.2.8
qradar_security_information_and_event_managereq7.2.8 p7
qradar_security_information_and_event_managereq7.2.8 p8

Name	Operator	Version
qradar_security_information_and_event_manager	eq	7.2.8 p2
qradar_security_information_and_event_manager	eq	7.2.8 p1
qradar_security_information_and_event_manager	eq	7.2.8 p5
qradar_security_information_and_event_manager	eq	7.2.8 p6
qradar_security_information_and_event_manager	eq	7.2.8 p3
qradar_security_information_and_event_manager	eq	7.2.8 p4
qradar_security_information_and_event_manager	ge	7.2.0
qradar_security_information_and_event_manager	lt	7.2.8
qradar_security_information_and_event_manager	eq	7.2.8 p7
qradar_security_information_and_event_manager	eq	7.2.8 p8