Security Bulletin: IBM QRadar SIEM is vulnerable to shell command injection vulnerability in the admin panel. (CVE-2015-4930, CVE-2015-2016 )

Summary

IBM QRadar SIEM is vulnerable to a shell command injection the in admin panel if logged in as an admin user.

Vulnerability Details

CVE-ID:CVE-2015-4930
**
Description:IBM QRadar could allow a user authenticated with admin access, to execute commands on the server as root. **
CVSS Base Score:8.5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/104118 for the current score**
CVSS Environmental Score:*Undefined
CVSS Vector:**AV:N/AC:M/Au:S/C:C/I:C/A:C

Affected Products and Versions

· IBM QRadar SIEM 7.2.x.

· IBM QRadar SIEM 7.1 MR2 Patch 1 - Patch 10.

Remediation/Fixes

· IBM QRadar/QRM/QVM/QRIF 7.2.5 Patch 4

· IBM QRadar SIEM 7.1 MR2 Patch 11 Interim Fix 02

Workarounds and Mitigations

None