CVE-2018-1649

IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144655.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:patch1:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:patch13:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.2.8:patch8:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:patch3:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:7.3.1:patch4:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:qradar_incident_forensics:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-10-05 13:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-1649

Mitre link : CVE-2018-1649

CVE.ORG link : CVE-2018-1649


JSON object : View

Products Affected

ibm

  • qradar_incident_forensics
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')