File Deletion Vulnerability in IBM QRadar Solutions
CVE-2020-4486

8.1HIGH

Key Information:

Vendor

IBM
Status
Qradar Wincollect
Vendor
CVE Published:
11 August 2020

What is CVE-2020-4486?

IBM QRadar versions 7.2.0 through 7.2.9 are susceptible to a vulnerability that can be exploited by authenticated users to delete or overwrite arbitrary files following the installation of WinCollect. This security flaw could potentially compromise the integrity and functionality of the affected systems.

Affected Version(s)

QRadar Wincollect 7.2.0

QRadar Wincollect 7.2.9

References

https://www.ibm.com/support/pages/node/6257885
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/181861
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.