Security Bulletin: IBM QRadar SIEM is vulnerable to remote code execution. (CVE-2015-4956)

Summary

Remote Code Execution in QRadar Web UI.

Vulnerability Details

CVE-ID: CVE-2015-4956 **
Description:IBM QRadar contains a remote code execution vulnerability could allow an authenticated user to execute certain commands on the underlying operating system using an unprivileged system account. **
CVSS Base Score: 6.3**
CVSS Temporal Score:** See https://exchange.xforce.ibmcloud.com/vulnerabilities/105230 for the current score**
CVSS Environmental Score:** Undefined*
CVSS Vector:** AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected Products and Versions

· IBM QRadar SIEM 7.1.n

Remediation/Fixes

· IBM QRadar SIEM 7.1 MR2 Patch 12

Workarounds and Mitigations

None