IBM SOAR QRadar Plugin App log injection

CVE-2023-38020

Summary

The IBM SOAR QRadar Plugin App versions 1.0 through 5.0.3 is affected by a vulnerability that enables authenticated users to manipulate output in log files. This flaw arises from improper handling of inputs, which may allow adversaries who gain access to the system to alter logs undetected. Such manipulation can impede incident response activities and compromise the integrity of logs relied upon for security audits and investigations. Addressing this vulnerability is crucial for maintaining robust log management and ensuring the authenticity of security narratives. Users are advised to review their system configurations and apply recommended patches to mitigate potential risks.

References