Security Bulletin: SQL Injection and Incorrect Handling of SSH Connection vulnerability in QRadar (CVE-2014-4824, CVE-2014-4826)

Summary IBM QRadar 7.2 MR2 contains SQL Injection and Incorrect Handling of SSH Connection vulnerabilities . Vulnerability Details CVE ID: CVE-2014-4824 DESCRIPTION: IBM QRadar is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the...

CVE-2014-4824

IBM QRadar SIEM vulnerability CVE-2014-4824: SQL injection in QRadar 7.2 MR2 that allows remote authenticated users to execute arbitrary SQL via unspecified vectors. Affected product: IBM QRadar SIEM (7.2 MR2; patched in 7.2.3 Patch 1). Root cause: improper handling of SQL statements in the back-...

CVE-2014-4824

SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...