CVE-2020-4280
35Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 73%
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
In short
IBM QRadar SIEM versions 7.3 and 7.4 have a flaw that allows attackers to run malicious commands on the server by sending specially crafted data. This happens because the software unsafely processes Java objects without proper validation.
Technical detail
The vulnerability exists in the Java deserialization function of QRadar SIEM 7.3/7.4, where user-supplied serialized objects are processed without adequate validation. An unauthenticated remote attacker can send a malicious serialized Java object to trigger arbitrary command execution on the affected system.
Summary generated and translated by AI from the official description.
IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 176140.
CVSS:3.0/AC:L/A:L/I:L/C:L/PR:L/UI:N/S:U/AV:N/E:U/RC:C/RL:O
Affected products
IBM · QRadar SIEM