PT-2014-3882 · Ibm · Ibm Security Qradar Siem

Published 2014-01-30 · Updated 2017-08-29 · CVE-2014-0838

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions prior to 7.2 MR1 with AutoUpdate package before 6.4

Description The issue allows remote attackers to execute arbitrary console commands by leveraging control of the server.

Recommendations For IBM Security QRadar SIEM versions prior to 7.2 MR1, update the AutoUpdate package to version 6.4 or later.

Fix

Related Identifiers

CVE-2014-0838

Affected Products

Ibm Security Qradar Siem

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-0838 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21663066 · Vendor Advisory
• http://securityfocus.com/bid/65127 · Note
• http://osvdb.org/102553 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90681 · Note