Skip to content
OpenAdvisories
High WID-SEC-2023-0857 17 CVEs

IBM QRadar SIEM: Mehrere Schwachstellen

Published May 24, 2022 · Updated Apr 4, 2023 · Revision 2 · de-DE

Vendor: IBM Product: QRadar SIEM Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, Dateien manipulieren oder Sicherheitsvorkehrungen zu umgehen.

Product

IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.

Vulnerabilities 17

  • High 8.2
    CVE-2021-32803

    Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning

    The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a s…

    npm node-tar tar node-tar Debian Ubuntu npm
  • High 8.2
    CVE-2021-32804 Public exploit EPSS 15%

    Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

    The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning ab…

    npm node-tar tar node-tar Debian Ubuntu npm
  • High 8.2
    CVE-2021-37701

    Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links

    The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is …

    npm node-tar nodejs tar Debian Ubuntu Alpine npm
  • High 8.2
    CVE-2021-37712

    Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links

    The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is…

    npm node-tar nodejs tar Debian Ubuntu Alpine npm
  • High 8.2
    CVE-2021-37713

    Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

    The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction targ…

    npm node-tar nodejs tar Alpine npm
  • High 7.5
    CVE-2020-7793

    Regular Expression Denial of Service (ReDoS)

    The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

    ua-parser-js node-ua-parser-js node-ua-parser-js Debian Ubuntu npm
  • High 7.5
    CVE-2021-27292

    Regular Expression Denial of Service (ReDoS) in ua-parser-js

    ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.

    ua-parser-js node-ua-parser-js node-ua-parser-js Debian Ubuntu npm
  • High 7.5
    CVE-2021-33502

    ReDoS in normalize-url

    The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.

    nodejs-nodemon node-yarnpkg node-got node-got Debian Ubuntu Azure Linux npm
  • High 7.5
    CVE-2021-33623

    Uncontrolled Resource Consumption in trim-newlines

    The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

    node-trim-newlines node-trim-newlines trim-newlines Debian Ubuntu npm
  • High 7.5
    CVE-2021-3807

    Inefficient Regular Expression Complexity in chalk/ansi-regex

    ansi-regex is vulnerable to Inefficient Regular Expression Complexity

    chalk chalk/ansi-regex node-ansi-regex ansi-regex Debian Ubuntu npm
  • High 7.2
    CVE-2021-23337 Public exploit Scanner template EPSS 20%

    Command Injection

    Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

    js-jquery node-lodash lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems
  • Medium 6.8
    CVE-2020-28498

    Cryptographic Issues

    The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the derive function actually exists on the secp256k1 curve. Thi…

    elliptic node-elliptic node-elliptic Debian Ubuntu npm
  • Medium 5.3
    CVE-2020-24025

    Improper Certificate Validation in node-sass

    Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.

    reaper node-node-sass node-sass node-node-sass Debian Ubuntu Azure Linux npm
  • Medium 5.3
    CVE-2020-28469

    Regular Expression Denial of Service (ReDoS)

    This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

    js-jquery nodejs-nodemon glob-parent node-glob-parent Debian Azure Linux npm
  • Medium 5.3
    CVE-2020-28500

    Regular Expression Denial of Service (ReDoS)

    Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

    js-jquery node-lodash lodash node-lodash Debian Ubuntu Azure Linux npm RubyGems
  • Medium 5.3
    CVE-2021-29060

    Regular Expression Denial of Service (ReDOS)

    A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.

    color-string node-color-string node-color-string Debian Ubuntu npm
  • Low 2.6
    CVE-2020-15168

    File size limit bypass in node-fetch

    node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people…

    node-fetch node-fetch node-fetch node-fetch Debian Ubuntu npm

Revision history

  1. #2

    Neue Updates von IBM aufgenommen

  2. #1

    Initiale Fassung

References