2.7

CVE-2024-56464

IBM QRadar SIEM is affected by an information disclosure vulnerability

IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_1
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_10
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_11
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_12
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_13
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_13_interim_fix_01
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_13_interim_fix_02
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_14
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_14_interim_fix_01
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_2
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_3
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_4
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_5
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_6
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_7
Ibm ≫ Qradar Security Information And Event Manager Version 7.5.0 Update update_pack_8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.211
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 2.7 1.2 1.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CWE-548 Exposure of Information Through Directory Listing

The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.

https://www.ibm.com/support/pages/node/7253664
Patch
Vendor Advisory