« Volver al listado

CVE-2020-4888

Estado: ModificadaAlta (8.8)—

IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Qradar Security Information AND Event Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-4888",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "IBM",
          "product": "QRadar SIEM",
          "versions": [
            {
              "status": "affected",
              "version": "7.3"
            },
            {
              "status": "affected",
              "version": "7.4"
            },
            {
              "status": "affected",
              "version": "7.3.3.Patch.7"
            },
            {
              "status": "affected",
              "version": "7.4.2.Patch.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-01-28T13:15:12.123",
  "references": [
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/190912",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://www.ibm.com/support/pages/node/6409306",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/190912",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.ibm.com/support/pages/node/6409306",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912."
    },
    {
      "lang": "es",
      "value": "IBM QRadar SIEM versiones 7.4.0 hasta 7.4.2 Parche 1 y versiones 7.3.0 hasta 7.3.3 Parche 7, podría permitir a un atacante remoto ejecutar comandos arbitrarios en el sistema, causados por la deserialización no segura del contenido suministrado por el usuario mediante la función de deserialización Java. Al enviar un objeto Java serializado malicioso, un atacante podría explotar esta vulnerabilidad para ejecutar comandos arbitrarios en el sistema. IBM X-Force ID: 190912"
    }
  ],
  "lastModified": "2026-06-17T03:20:43.347",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC04E82E-CD62-4DD9-8897-66C3661487D8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "873EF168-F0E4-45C1-81B3-54CA4A16AD84"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "172A4B85-CCFB-4354-8764-4ED2D9341900"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48E8F646-A036-4164-9526-79DC2537E4D5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFBE3ED4-806C-4683-A652-28BC6CA44398"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.1:p6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD8F5DC6-5636-470A-9973-172AB442F0F6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FECD03EF-2984-44F7-8DAD-BD3A608C2631"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:interim_fix_01:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "852F33C8-18A9-4C89-83B9-506CB507AA3B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:interim_fix_02:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC6C193A-43C1-4CB0-887B-67D068B6B597"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43BD0A0A-349D-4C40-A1BF-78853DE8C72A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8AE70A0F-E7BC-4DF7-A8A3-59F3975E27B8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "766E0831-A78D-4FD4-B830-1E818A7F1255"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.2:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2909E29F-A1EC-4772-BA7E-D92004776EE8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E4BDE03-4F44-4DC9-A8D2-FDF52FE79108"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91CD9DD8-E60C-4361-9912-6F01D03DB8C3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A478B6C1-A1C0-4602-BD22-1A9FDEA01B98"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3184D04-0C17-4E99-96E9-B3941D7FE3BF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04666A94-FA62-4AAD-9CAD-615A7EEF0B33"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EF23276-C1E7-4D55-8BCE-864C3E084923"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BF60DED-F561-4FAC-88BE-CEDD4985B29F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C29DFC8-ED2D-4357-8040-12DA453C624D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.0:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B02F2F00-3B53-4075-BD0B-323122B9CC11"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0465B067-FBBB-468E-8756-D11B69B56DB3"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.1:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6ADE8DE7-BB3B-4DEE-B15A-C9C159B3360A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3AD9893A-B195-452C-940B-CF934F2B36B7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC734AFB-F7F6-49E6-9B59-0EE343F37405"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}