IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/159589/QRadar-RemoteJavaScript-Deserialization.html | Exploit Third Party Advisory VDB Entry |
http://seclists.org/fulldisclosure/2020/Oct/18 | Exploit Mailing List Third Party Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/176140 | VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/6344079 | Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: ibm
Published: 2020-10-07T00:00:00
Updated: 2020-10-19T17:06:19
Reserved: 2019-12-30T00:00:00
Link: CVE-2020-4280
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-10-08T14:15:12.657
Modified: 2022-06-29T21:14:50.833
Link: CVE-2020-4280
JSON object: View
Redhat Information
No data.
CWE