PT-2024-5311 · Ibm · Ibm Qradar Suite+1

Ben Goodspeed + 9 · Published 2024-05-02 · Updated 2025-08-13 · CVE-2023-47727

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 IBM QRadar Suite Software versions 1.10.12.0 through 1.10.20.0

Description The issue exists due to insufficient input validation, allowing a remote attacker to modify dashboard parameters. This could be exploited by an authenticated user.

Recommendations For IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, update to a version outside of this range to resolve the issue. For IBM QRadar Suite Software versions 1.10.12.0 through 1.10.20.0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to dashboard parameters until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-1287

CWE-20

Related Identifiers

BDU:2024-05939

CVE-2023-47727

Affected Products

Ibm Cloud Pak For Security

Ibm Qradar Suite

References · 13

• https://osv.dev/vulnerability/CVE-2023-47727 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/272089 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47727 · Security Note
• https://ibm.com/support/pages/node/7149968 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05939 · Security Note
• https://t.me/cveNotify/132035 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024050221 · Note
• https://t.me/cvenotify/78904 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1786075496209371418 · Twitter Post
• https://t.me/cvenotify/78854 · Telegram Post
• https://vuldb.com/ru/?id.262863 · Note
• https://twitter.com/CVEnew/status/1786046065843605960 · Twitter Post
• https://twitter.com/linuxpatch/status/1786094763101294987 · Twitter Post