Vulnerability Bulletins |
IBM Security Bulletin: IBM QRadar SIEM is vulnerable to OS command injection. (CVE-2016-2875) |
|
| Affected software | IBM |
|
It is possible to inject a payload with OS Commands in QRadar which are run as root on the host OS.CVE(s): CVE-2016-2875Affected product(s) and affected version(s):· IBM QRadar 7.1.n · IBM QRadar 7.2.nRefer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21988094X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/112837 More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-qradar-siem-is-vulnerable-to-os-command-injection-cve-2016-2875/ |
|