CVE-2020-4888: medium-severity vulnerability in IBM QRadar SIEM
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
IBM QRadar SIEM versions 7.4.0-7.4.2 Patch 1 and 7.3.0-7.3.3 Patch 7 can be exploited remotely through insecure Java deserialization to run arbitrary commands on the system. An attacker sends a specially crafted serialized Java object to execute malicious code.
Remote code execution vulnerability in IBM QRadar SIEM caused by unsafe deserialization of untrusted Java objects. An unauthenticated attacker can transmit a malicious serialized object to trigger arbitrary command execution with the privileges of the QRadar process. Affects versions 7.4.0-7.4.2 Patch 1 and 7.3.0-7.3.3 Patch 7.
In the same product, most dangerous first.