PT-2023-8376 · Ibm · Ibm Qradar Siem

Dominik Baucke + 1 · Published 2023-11-11 · Updated 2023-12-13 · CVE-2023-43057

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM version 7.5.0

Description The issue is related to a lack of protection for the web page structure in the IBM QRadar SIEM system, allowing a remote attacker to bypass restrictions on executing JavaScript. This can lead to the embedding of arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session.

Recommendations For IBM QRadar SIEM version 7.5.0, consider disabling the execution of JavaScript code in the Web UI as a temporary workaround until a patch is available. Restrict access to the Web UI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-00572

CVE-2023-43057

Affected Products

Ibm Qradar Siem

References · 6

• https://ibm.com/support/pages/node/7070736 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-43057 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00572 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/267484 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43057 · Security Note
• https://twitter.com/usdAG/status/1734899131229888837 · Twitter Post