PT-2018-1998 · Ibm · Ibm Qradar Siem

Chris Shepherd + 7 · Publicado 2018-12-04 · Atualizado 2019-10-09 · CVE-2018-1730

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.2 through 7.3

Description The issue is related to incorrect restriction of XML links to external objects, which can be exploited by a remote attacker to expose sensitive information or consume memory resources. This can be achieved through a XML External Entity Injection (XXE) attack when processing XML data.

Recommendations For IBM QRadar SIEM versions 7.2 and 7.3, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting XML data processing to minimize the risk of XXE attacks until a patch is available.

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

BDU:2018-01614

CVE-2018-1730

Produtos afetados

Ibm Qradar Siem

Referências · 6

• https://www-01.ibm.com/support/docview.wss?uid=ibm10742741 · Nota
• https://ibm.com/support/docview.wss?uid=ibm10742741&myns=swgother&mynp=OCSSBQAC&mync=E&cm_sp=swgother-_-OCSSBQAC-_-E · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1730 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01614 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147709 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1730 · Aviso do Fabricante