IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower privileged user. IBM X-ForceID: 175897.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qradar_security_information_and_event_manager | Ibm | 7.3.0 (including) | 7.3.3 (excluding) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3 (including) | 7.3.3 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-p1 (including) | 7.3.3-p1 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-p2 (including) | 7.3.3-p2 (including) |