Marcin Bortkiewicz

Name of the Vulnerable Software and Affected Versions: IBM Security ReaQta version 3.12 Description: The issue allows an authenticated user to perform unauthorized actions due to the software's reliance on untrusted inputs. Recommendations: For IBM Security ReaQta version 3.12, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar SIEM version 7.5 **Description** The issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session. This is due to a cross-site scripting issue. **Recommendations** For IBM QRadar SIEM version 7.5, consider restricting access to the Web UI until a fix is available, and avoid using the Web UI with privileged accounts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** IBM Security ReaQta version 3.12 **Description** This issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. The vulnerability is related to cross-site scripting. **Recommendations** For IBM Security ReaQta version 3.12, consider disabling access to the Web UI until a patch is available to prevent potential exploitation of the cross-site scripting vulnerability. Restricting the ability of privileged users to embed arbitrary JavaScript code can help minimize the risk of credentials disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: IBM Security ReaQta version 3.12 Description: This issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. The vulnerability is related to cross-site scripting. Recommendations: For IBM Security ReaQta version 3.12, consider disabling access to the Web UI until a patch is available to prevent potential exploitation of the cross-site scripting vulnerability. Restricting user privileges may also help minimize the risk of credentials disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar Suite Software versions 1.10.12.0 through 1.10.22.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 **Description** The issue is related to weaknesses in the error reporting mechanism of IBM QRadar Suite and IBM Cloud Pak for Security. This could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. The obtained information could be used in further attacks against the system. **Recommendations** For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.22.0, update to a version outside of this range to mitigate the risk. For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to detailed technical error messages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM Security QRadar EDR version 3.12 **Description** A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. This issue allows for HTML injection, potentially leading to the execution of malicious code in the victim's browser. **Recommendations** For IBM Security QRadar EDR version 3.12, consider disabling any features that allow user-inputted HTML to be executed in the browser until a patch is available. Restrict access to areas of the application where HTML injection could be exploited to minimize the risk of attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Verify Access OIDC Provider versions 22.09 through 23.03 **Description** The issue is related to hazardous input validation, which could disclose sensitive information to a local user. **Recommendations** For versions 22.09 through 23.03, update to a version that addresses the hazardous input validation issue to prevent disclosure of sensitive information.

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.3 through 12.0 Description: The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. This is due to the failure to neutralize special elements used in the operating system command. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: For IBM Security Guardium versions 11.3 through 12.0, upgrade the affected component immediately to prevent potential system takeover. As a temporary workaround, consider restricting access to the request handler to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 IBM QRadar Suite Software versions 1.10.12.0 through 1.10.20.0 **Description** The issue exists due to insufficient input validation, allowing a remote attacker to modify dashboard parameters. This could be exploited by an authenticated user. **Recommendations** For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version outside of this range to resolve the issue. For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.20.0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to dashboard parameters until a patch is available.

**Name of the Vulnerable Software and Affected Versions** IBM QRadar SIEM version 7.5 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. This is due to a stored cross-site scripting vulnerability. **Recommendations** For IBM QRadar SIEM version 7.5, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Web UI to minimize the risk of exploitation. Avoid using the Web UI for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security ReaQta version 3.12 **Description** The issue is related to weaknesses in the authentication procedure of IBM Security ReaQta, which could allow a remote attacker to disclose protected information. Specifically, IBM Security ReaQta 3.12 returns sensitive information in an HTTP response that could be used in further attacks against the system. **Recommendations** For IBM Security ReaQta version 3.12, consider restricting access to sensitive information and HTTP responses to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security ReaQta version 3.12 **Description** The issue is related to improper allocation of resources, which could allow a privileged user to cause a denial of service by sending multiple administration requests. This could potentially be exploited by a remote attacker to disrupt service. **Recommendations** For IBM Security ReaQta version 3.12, consider restricting the ability to send multiple administration requests to prevent denial of service attacks. As a temporary workaround, limit the allocation of resources to prevent improper use. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium Key Lifecycle Manager version 4.3 **Description** The issue allows an authenticated user to upload files of a dangerous file type. **Recommendations** For IBM Security Guardium Key Lifecycle Manager version 4.3, consider restricting file uploads to only safe file types until a patch is available. As a temporary workaround, limit the privileges of authenticated users to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium Key Lifecycle Manager version 4.3 **Description** The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. **Recommendations** For IBM Security Guardium Key Lifecycle Manager version 4.3, consider disabling the Web UI functionality until a patch is available to prevent exploitation of the cross-site scripting issue. Restrict access to the Web UI to minimize the risk of credentials disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Guardium Key Lifecycle Manager version 4.2 IBM Security Guardium Key Lifecycle Manager version 4.3 **Description** The issue concerns the presence of plain text hard-coded credentials or other secrets in the source code repository of IBM Security Guardium Key Lifecycle Manager. **Recommendations** For version 4.2, update to a version that does not contain hard-coded credentials. For version 4.3, update to a version that does not contain hard-coded credentials. As a temporary workaround, consider restricting access to the source code repository to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM Security Verify Governance version 10.0 IBM Security Verify Governance Identity Manager version 10.0 **Description** The issue is related to improper file validation, allowing a privileged user to upload arbitrary files. Additionally, there is a problem with improper access controls, which could enable a local user to escalate their privileges. **Recommendations** For IBM Security Verify Governance version 10.0, consider restricting file upload capabilities until a proper fix is applied. For IBM Security Verify Governance Identity Manager version 10.0, limit access to sensitive areas of the system to prevent privilege escalation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Verify Information Queue versions 10.0.4 through 10.0.5 **Description** The issue is related to a flaw in the error reporting mechanism of IBM Security Verify Information Queue, which could allow a remote attacker to obtain sensitive information, potentially aiding in further attacks against the system. **Recommendations** For versions 10.0.4 and 10.0.5, update to a version that addresses the error reporting mechanism flaw to prevent remote attackers from obtaining sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Verify Information Queue versions 10.0.4 through 10.0.5 **Description** The issue is related to the storage of sensitive information in plain clear text, which can be accessed by a local user. This is due to a lack of encryption measures. Exploitation of this issue may allow an attacker to gain access to confidential information. **Recommendations** For versions 10.0.4 and 10.0.5, update to a version that properly encrypts sensitive information to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Verify Information Queue versions 10.0.4 through 10.0.5 **Description** The issue is related to a flaw in the error reporting mechanism of IBM Security Verify Information Queue, which could allow a remote attacker to obtain sensitive information, potentially aiding in further attacks against the system. **Recommendations** For versions 10.0.4 and 10.0.5, update to a version that addresses this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IBM Security Verify Governance, Identity Manager version 10.0 **Description** The issue is related to insufficient argument validation in the Identity Manager component, allowing a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. **Recommendations** For IBM Security Verify Governance, Identity Manager version 10.0, consider restricting access to the system until a patch is available, and avoid using the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.