PT-2023-8376 · Ibm · Ibm Qradar Siem

Dominik Baucke + 1 · Publicado 2023-11-11 · Atualizado 2023-12-13 · CVE-2023-43057

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM version 7.5.0

Description The issue is related to a lack of protection for the web page structure in the IBM QRadar SIEM system, allowing a remote attacker to bypass restrictions on executing JavaScript. This can lead to the embedding of arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session.

Recommendations For IBM QRadar SIEM version 7.5.0, consider disabling the execution of JavaScript code in the Web UI as a temporary workaround until a patch is available. Restrict access to the Web UI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2024-00572

CVE-2023-43057

Produtos afetados

Ibm Qradar Siem

Referências · 6

• https://ibm.com/support/pages/node/7070736 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-43057 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2024-00572 · Nota de Segurança
• https://twitter.com/usdAG/status/1734899131229888837 · Publicação no Twitter
• https://exchange.xforce.ibmcloud.com/vulnerabilities/267484 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-43057 · Nota de Segurança