CVE-2018-1649

Name of the Vulnerable Software and Affected Versions IBM QRadar Incident Forensics versions 7.2 through 7.3

Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing dot dot sequences (../) to view arbitrary files on the system.

Recommendations For IBM QRadar Incident Forensics versions 7.2 through 7.3, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available. Avoid using URL requests that contain dot dot sequences (../) in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.