CVE-2019-4556

IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ibmCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
ibmqradar_advisor_with_watson
1.0.0 ≤
𝑥
≤ 2.4.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
ibmqradar_advisor
1.0.0
CNA
ibmqradar_advisor
2.4.0
CNA
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/166205
https://www.ibm.com/support/pages/node/1102443
https://exchange.xforce.ibmcloud.com/vulnerabilities/166205
https://www.ibm.com/support/pages/node/1102443