CVE-2020-4979

high-risk

Published 2021-05-05

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538.

Do I need to act?

-

0.57% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

9

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (12)

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Qradar Security Information And Event Manager

Affected Vendors

Ibm

References (4)

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/192538

Vendor Advisory https://www.ibm.com/support/pages/node/6449668

VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/192538

Vendor Advisory https://www.ibm.com/support/pages/node/6449668

51

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 2/34 · Minimal

Exposure 17/34 · Moderate