NetSight
critical9.8

CVE-2020-4979

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication.

Impact

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
from 7.3.0 before 7.3.3
from 7.4.0 before 7.4.2
Versions 7.3.3, 7.4.2

References