Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities

Summary IBM QRadar User Behavior Analytics contains vulnerable packages/components and that may be identified and potentially exploited. The packages have been updated in the latest release and the vulnerabilities identified in the CVEs have been addressed. Please follow the instructions in the...

Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities

Summary IBM QRadar User Behavior Analytics contains vulnerable packages/components and that may be identified and potentially exploited. The packages have been updated in the latest release and the vulnerabilities identified in the CVEs have been addressed. Please follow the instructions in the...

Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities

Summary IBM QRadar User Behavior Analytics contains vulnerable packages/components and that may be identified and potentially exploited. The package has been updated in the latest release and the vulnerabilities identified in the CVEs have been addressed. Please follow the instructions in the...

CVE-2022-36771: Improper Access Control

IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791...

PT-2021-18456

Name of the Vulnerable Software and Affected Versions IBM QRadar User Behavior Analytics version 4.1.1 Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting actions from a user that the...

CVE-2021-29757: Cross-Site Request Forgery (CSRF)

IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202168...

CVE-2021-20393: Generation of Error Message Containing Sensitive Information

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001...

PT-2021-13930

Name of the Vulnerable Software and Affected Versions: IBM QRadar User Behavior Analytics versions 1.0.0 through 4.1.0 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations: For versions 1.0.0 through 4.1.0, consider...

PT-2021-13932

Name of the Vulnerable Software and Affected Versions: IBM QRadar User Behavior Analytics versions 1.0.0 through 4.1.0 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used...

CVE-2021-20429: Incorrect Authorization

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334...

CVE-2021-20392: Improper Neutralization of Input During Web Page Generation

IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2021-13931

Name of the Vulnerable Software and Affected Versions: IBM QRadar User Behavior Analytics versions 1.0.0 through 4.0.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

CVE-2021-20391: Insecure Storage of Sensitive Information

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999...

PT-2021-13959

Name of the Vulnerable Software and Affected Versions: IBM QRadar User Behavior Analytics versions 1.0.0 through 4.1.0 Description: The issue is related to an overly permissive cross-domain policy, which could lead to the disclosure of sensitive information. Recommendations: For versions 1.0.0...