CVE-2016-2877

Опубликовано: 30 нояб. 2016

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 uses weak permissions for unspecified directories under the web root, which allows local users to modify data by writing to a file.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21987773
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95002
http://www-01.ibm.com/support/docview.wss?uid=swg21987773
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95002

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:mr1:*:*:*:*:*:*

Версия до 7.1.0 (включая)

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00045

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-275

Связанные уязвимости

GHSA-7qpw-gvqr-xrp4