Vulnerability in Ibm Qradar
CVE-2020-4269
IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IB…
EPSS: 0.003 (55.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/S:U/A:N/I:N/AC:L/PR:N/AV:N/UI:N/C:H/RC:C/E:U/RL:O.
Affected products
- Ibm Qradar — versions 7.3.3.Patch2, 7.3.0
References
- www.ibm.com/support/pages/node/6189711 (x_refsource_CONFIRM)
- ibm-qradar-cve20204269-info-disc (175845) (vdb-entry, x_refsource_XF)
- 20200421 Unauthorized access to QRadar configuration sets via default password (mailing-list, x_refsource_FULLDISC)
- packetstormsecurity.com/files/157328/QRadar-Community-Edition-7.3.1.6-Default-C… (x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-4269?
- CVE-2020-4269 is a high-severity vulnerability in Ibm Qradar. CVSS score: 7.5/10. Published 2020-04-15.
- How severe is CVE-2020-4269?
- High severity. CVSS v3 base score is 7.5 out of 10.