CVE-2020-4274: IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized...

Security readout for executives and security teams

IBM QRadar versions 7.3.0 through 7.3.3 Patch 2 had inadequate permission checks. A logged-in user could access data or perform actions beyond their authorization. This is not an internet-wide unauthenticated takeover issue, but it matters where QRadar contains sensitive security telemetry and lower-privileged accounts exist. Exposure is most likely in organizations still running IBM QRadar 7.3.0 through 7.3.3 Patch 2, especially where multiple analysts or integrations use lower-privileged authenticated accounts. Treat as a controlled remediation item, not an emergency unless affected QRadar systems are broadly accessible or have many low-trust users. Prioritize because QRadar often holds sensitive security evidence and investigation data. Mitigation focus: Review IBM advisory 6189705 for the exact fixed level and vendor guidance.; Upgrade or patch affected QRadar deployments according to IBM guidance.; Restrict QRadar access to trusted networks and authorized users only..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.