IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qradar_incident_forensics | Ibm | 7.5.0 (including) | 7.5.0 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_1 (including) | 7.5.0-update_pack_1 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_10 (including) | 7.5.0-update_pack_10 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_11 (including) | 7.5.0-update_pack_11 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_12 (including) | 7.5.0-update_pack_12 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_13 (including) | 7.5.0-update_pack_13 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_2 (including) | 7.5.0-update_pack_2 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_3 (including) | 7.5.0-update_pack_3 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_4 (including) | 7.5.0-update_pack_4 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_5 (including) | 7.5.0-update_pack_5 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_6 (including) | 7.5.0-update_pack_6 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_7 (including) | 7.5.0-update_pack_7 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_8 (including) | 7.5.0-update_pack_8 (including) |
| Qradar_incident_forensics | Ibm | 7.5.0-update_pack_9 (including) | 7.5.0-update_pack_9 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0 (including) | 7.5.0 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_1 (including) | 7.5.0-update_pack_1 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_10 (including) | 7.5.0-update_pack_10 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_11 (including) | 7.5.0-update_pack_11 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_12 (including) | 7.5.0-update_pack_12 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_13 (including) | 7.5.0-update_pack_13 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_2 (including) | 7.5.0-update_pack_2 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_3 (including) | 7.5.0-update_pack_3 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_4 (including) | 7.5.0-update_pack_4 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_5 (including) | 7.5.0-update_pack_5 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_6 (including) | 7.5.0-update_pack_6 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_7 (including) | 7.5.0-update_pack_7 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_8 (including) | 7.5.0-update_pack_8 (including) |
| Qradar_security_information_and_event_manager | Ibm | 7.5.0-update_pack_9 (including) | 7.5.0-update_pack_9 (including) |