PT-2016-5263

CVE-2016-2877

Published

2016-11-30

Updated

2016-12-23

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7

Description The issue allows local users to modify data by writing to a file due to weak permissions for unspecified directories under the web root.

Recommendations For IBM QRadar SIEM version 7.1 before MR2 Patch 13, apply MR2 Patch 13 to resolve the issue. For IBM QRadar SIEM version 7.2 before 7.2.7, update to version 7.2.7 to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products