Boletines de Vulnerabilidades

IBM Security Bulletin: IBM QRadar SIEM and Incident Forensics are vulnerable to a path traversal attack. (CVE-2016-2872)

   
Software afectado IBM
 
Vulnerabilities found in both QRadar SIEM and Incident Forensics allow for path traversal via improperly handled parameters.CVE(s): CVE-2016-2872Affected product(s) and affected version(s):· IBM QRadar SIEM 7.2.n · IBM QRadar Incident Forensics 7.2.nRefer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21985775X-Force Database:

More info:

https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-qradar-siem-and-incident-forensics-are-vulnerable-to-a-path-traversal-attack-cve-2016-2872/