Vigil@nce - IBM QRadar SIEM: Server Side Request Forgery
November 2019 by Vigil@nce
SYNTHESIS OF THE VULNERABILITY
Impacted products: QRadar SIEM.
Severity: 2/4.
Consequences: user access/rights.
Provenance: internet client.
Confidence: confirmed by the editor (5/5).
Creation date: 27/09/2019.
DESCRIPTION OF THE VULNERABILITY
An attacker can trigger a Server Side Request Forgery of IBM QRadar SIEM, in order to force the server to perform operations.
ACCESS TO THE FULL VIGIL@NCE BULLETIN
https://vigilance.fr/vulnerability/IBM-QRadar-SIEM-Server-Side-Request-Forgery-30465