IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication. An attacker that is able to comprimise or spoof traffic between hosts may be able to execute arbitrary commands. IBM X-Force D: 192538.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qradar_security_information_and_event_manager | Ibm | 7.3.0 (including) | 7.3.3 (excluding) |
| Qradar_security_information_and_event_manager | Ibm | 7.4.0 (including) | 7.4.2 (excluding) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3 (including) | 7.3.3 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_1 (including) | 7.3.3-fix_pack_1 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_2 (including) | 7.3.3-fix_pack_2 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_3 (including) | 7.3.3-fix_pack_3 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_4 (including) | 7.3.3-fix_pack_4 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_5 (including) | 7.3.3-fix_pack_5 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_6 (including) | 7.3.3-fix_pack_6 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.3.3-fix_pack_7 (including) | 7.3.3-fix_pack_7 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.4.2 (including) | 7.4.2 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.4.2-fix_pack_1 (including) | 7.4.2-fix_pack_1 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.4.2-fix_pack_2 (including) | 7.4.2-fix_pack_2 (including) |