Remote Command Execution Vulnerability in IBM QRadar SIEM
CVE-2015-4930

Currently unrated

Key Information:

Vendor: IBM
Status: Qradar Security Information And Event Manager
Vendor: CVE Published:; 4 October 2015

Summary

IBM QRadar SIEM versions 7.1 MR2 prior to Patch 11 IF02 and 7.2.x versions before Patch 4 allow remote authenticated users to leverage administrative access to execute arbitrary commands with root privileges. This vulnerability poses significant security risks, as it can be exploited by authenticated users to perform unauthorized actions within the system.

References

http://www.securityfocus.com/bid/76695

vdb-entryx_refsource_BID

http://www-01.ibm.com/support/docview.wss?uid=swg21965813

x_refsource_CONFIRM

Timeline

Vulnerability published
Oct 4, 2015
Vulnerability Reserved
Jun 24, 2015