VulnerabilityModified
CVE-2020-4485
IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks.
MEDIUM 6.5EPSS 1.49%
Does this matter?
Lower severity and a low EPSS score (1.49%). Track it; it rarely justifies an emergency change on its own.
Description
IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing security mechanisms in future attacks. IBM X-Force ID: 181860.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.49% probability · 73th percentile
- CISA KEV
- Not listed
- Affected
- ibm/qradar security information and event manager
- Source
- psirt@us.ibm.com
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181860VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6257885Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/181860VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6257885Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.