IBM QRadar WinCollect Vulnerability Advisory: Multiple CVEs (DoS, Info Disclosure, Race Condition)

Vulnerability Key Information Vulnerability Overview IBM QRadar WinCollect contains known vulnerable components; IBM has addressed the related vulnerabilities. Vulnerability Details CVE-2022-25883 Description: Node.js semver package contains a Denial of Service (DoS) vulnerability caused by a Regular Expression Denial of Service (ReDoS) flaw in the Range function. CVSS Base Score: 5.3 CVE-2021-39008 Description: IBM QRadar WinCollect Agent may allow privileged users to obtain sensitive information due to failure to follow best practices. CVSS Base Score: 2.7 CVE-2023-1255 Description: OpenSSL contains a Denial of Service vulnerability caused by a defect in the AES-XTS cipher decryption implementation on 64-bit ARM platforms. CVSS Base Score: 3.7 CVE-2023-26279 Description: IBM QRadar WinCollect Agent may allow local users to perform unauthorized operations due to improper encoding. CVSS Base Score: 3.3 CVE-2023-32001 Description: cURL libcurl contains a security restriction bypass vulnerability caused by a race condition in the fopen() function when saving cookie, HSTS, and/or alt-svc data to files. CVSS Base Score: 5.5 CVE-2023-38039 Description: cURL libcurl contains a Denial of Service vulnerability caused by not limiting the number and size of headers received in responses. CVSS Base Score: 7.5 Affected Products and Versions Affected Product: QRadar WinCollect Agent Versions: 10.0 to 10.1.7 Remediation Recommendations IBM recommends customers upgrade their systems immediately. A new upgrade is available for the standalone WinCollect agent; version 10.1.8 resolves the vulnerabilities. Mitigation and Workarounds None

Goal Reached Thanks to every supporter — we hit 100%!

IBM QRadar WinCollect Vulnerability Advisory: Multiple CVEs (DoS, Info Disclosure, Race Condition)