PT-2025-37411 · Ibm · Ibm Qradar Siem

Ben Goodspeed + 5 · Published 2025-09-14 · Updated 2025-12-15 · CVE-2025-0164

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.5 through 7.5 Update Pack 13 Independent Fix 01

Description IBM QRadar SIEM versions 7.5 through 7.5 Update Pack 13 Independent Fix 01 may allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment.

Recommendations Apply appropriate permission assignments to configuration files.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-0164

Affected Products

Ibm Qradar Siem

References · 9

• https://osv.dev/vulnerability/CVE-2025-0164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0164 · Security Note
• https://t.me/CVEtracker/32450 · Telegram Post
• https://ibm.com/support/pages/node/7244784 · Patch, Vendor Advisory
• https://t.me/cveNotify/135401 · Telegram Post
• https://twitter.com/CVEnew/status/1967216219192279074 · Twitter Post
• https://twitter.com/BaseFortify/status/1967496054649303381 · Twitter Post
• https://twitter.com/dailytechonx/status/1967706239879557285 · Twitter Post
• https://t.me/cveNotify/145792 · Telegram Post