IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qradar_wincollect | Ibm | 10.0 (including) | 10.1.7 (excluding) |