CVE-2017-1723

Published: Apr 26, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 134812.

Affected (51)

Products: Ibm: Qradar Security Information And Event Manager, Qradar Incident Forensics, Qradar Network Insights

Ibm

3 products

Qradar Security Information And Event Manager

Qradar Incident Forensics

Qradar Network Insights

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	From 7.2.0 to 7.2.8
Ibm Qradar Security Information And Event Manager	Version 7.2.8
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p10
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p11
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p1
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p2
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p3
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p4
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p5
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p6
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p7
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p8
Ibm Qradar Security Information And Event Manager	Version 7.2.8 p9
Ibm Qradar Security Information And Event Manager	Version 7.3.0
Ibm Qradar Security Information And Event Manager	Version 7.3.1
Ibm Qradar Security Information And Event Manager	Version 7.3.1 p1
Ibm Qradar Security Information And Event Manager	Version 7.3.1 p2

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Incident Forensics	From 7.2.0 to 7.2.8
Ibm Qradar Incident Forensics	Version 7.2.8
Ibm Qradar Incident Forensics	Version 7.2.8 p10
Ibm Qradar Incident Forensics	Version 7.2.8 p11
Ibm Qradar Incident Forensics	Version 7.2.8 p1
Ibm Qradar Incident Forensics	Version 7.2.8 p2
Ibm Qradar Incident Forensics	Version 7.2.8 p3
Ibm Qradar Incident Forensics	Version 7.2.8 p4
Ibm Qradar Incident Forensics	Version 7.2.8 p5
Ibm Qradar Incident Forensics	Version 7.2.8 p6
Ibm Qradar Incident Forensics	Version 7.2.8 p7
Ibm Qradar Incident Forensics	Version 7.2.8 p8
Ibm Qradar Incident Forensics	Version 7.2.8 p9
Ibm Qradar Incident Forensics	Version 7.3.0
Ibm Qradar Incident Forensics	Version 7.3.1
Ibm Qradar Incident Forensics	Version 7.3.1 p1
Ibm Qradar Incident Forensics	Version 7.3.1 p2

Configuration C

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Network Insights	From 7.2.0 to 7.2.8
Ibm Qradar Network Insights	Version 7.2.8
Ibm Qradar Network Insights	Version 7.2.8 p10
Ibm Qradar Network Insights	Version 7.2.8 p11
Ibm Qradar Network Insights	Version 7.2.8 p1
Ibm Qradar Network Insights	Version 7.2.8 p2
Ibm Qradar Network Insights	Version 7.2.8 p3
Ibm Qradar Network Insights	Version 7.2.8 p4
Ibm Qradar Network Insights	Version 7.2.8 p5
Ibm Qradar Network Insights	Version 7.2.8 p6
Ibm Qradar Network Insights	Version 7.2.8 p7
Ibm Qradar Network Insights	Version 7.2.8 p8
Ibm Qradar Network Insights	Version 7.2.8 p9
Ibm Qradar Network Insights	Version 7.3.0
Ibm Qradar Network Insights	Version 7.3.1
Ibm Qradar Network Insights	Version 7.3.1 p1
Ibm Qradar Network Insights	Version 7.3.1 p2