NetSight
medium5.3

CVE-2016-2872

Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to re…

Impact

Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
Versions 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5
IbmSecurity Qradar Incident Forensics
Versions 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5

Weakness classification

References