IBM SOAR QRadar Plugin App directory traversal
CVE-2023-38019

8.1HIGH

Key Information:

Vendor

IBM
Status
Soar Qradar Plugin App
Vendor
CVE Published:
2 February 2024

What is CVE-2023-38019?

The IBM SOAR QRadar Plugin App, spanning versions 1.0 through 5.0.3, has a directory traversal vulnerability that can be exploited by remote attackers. Through the manipulation of a URL request, specifically by including sequences such as '/..', an attacker may gain access to and view sensitive files residing on the system. This vulnerability raises significant concerns for organizations utilizing the affected product, as it exposes potentially confidential information, thereby increasing the risk of unauthorized access and data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SOAR QRadar Plugin App 1.0 <= 5.0.3

References

https://www.ibm.com/support/pages/node/7111679
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/260575
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.