Vulnerability in IBM Qradar Security Information And Event Manager
CVE-2019-4210
IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986.
EPSS: 0.022 (81.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Ibm Qradar_security_information_and_event_manager — versions 7.3.2
- Ibm Qradar Siem — versions 7.3.2
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2019-4210?
- CVE-2019-4210 is a high-severity vulnerability in IBM Qradar Security Information And Event Manager. CVSS score: 8.1/10. Published 2019-04-08.
- How severe is CVE-2019-4210?
- High severity. CVSS v3 base score is 8.1 out of 10.