IBM SOAR QRadar Plugin App directory traversal

CVE-2023-38019

What is CVE-2023-38019?

The IBM SOAR QRadar Plugin App, spanning versions 1.0 through 5.0.3, has a directory traversal vulnerability that can be exploited by remote attackers. Through the manipulation of a URL request, specifically by including sequences such as '/..', an attacker may gain access to and view sensitive files residing on the system. This vulnerability raises significant concerns for organizations utilizing the affected product, as it exposes potentially confidential information, thereby increasing the risk of unauthorized access and data breaches.

References