The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qradar_security_information_and_event_manager | Ibm | * | 7.2.0 (including) |
References
- http://osvdb.org/102553
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066
- http://www.securityfocus.com/bid/65127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90681
- http://osvdb.org/102553
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066
- http://www.securityfocus.com/bid/65127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90681