PT-2024-5310 · Ibm · Ibm Qradar Suite+1

Published 2024-06-17 · Updated 2025-08-08 · CVE-2023-47726

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM QRadar Suite Software versions 1.10.12.0 through 1.10.21.0 IBM Cloud Pak for Security versions 1.10.12.0 through 1.10.21.0

Description The issue exists due to insufficient input validation, allowing a remote attacker to execute arbitrary commands. This can be done by an authenticated user, enabling the execution of certain arbitrary commands.

Recommendations For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.21.0, update to a version that includes the fix for this issue. For IBM Cloud Pak for Security versions 1.10.12.0 through 1.10.21.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the affected systems to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-1287

CWE-20

Related Identifiers

BDU:2024-05938

CVE-2023-47726

Affected Products

Ibm Cloud Pak For Security

Ibm Qradar Suite

References · 12

• https://osv.dev/vulnerability/CVE-2023-47726 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47726 · Security Note
• https://https//www.ibm.com/support/pages/node/7157750 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/272087 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05938 · Security Note
• https://ibm.com/support/pages/bull · Note
• https://twitter.com/cracbot/status/1804393958854005231 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024062745 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/233673 · Note
• https://t.me/cveNotify/131361 · Telegram Post
• https://ibm.com/support/pages/node/7158986 · Note
• https://twitter.com/cracbot/status/1804756328126279850 · Twitter Post