PT-2014-3882

CVE-2014-0838

Published

2014-01-30

Updated

2017-08-29

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions prior to 7.2 MR1 with AutoUpdate package before 6.4

Description The issue allows remote attackers to execute arbitrary console commands by leveraging control of the server.

Recommendations For IBM Security QRadar SIEM versions prior to 7.2 MR1, update the AutoUpdate package to version 6.4 or later.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾