Security Bulletin: IBM QRadar SIEM is vulnerable to shell command injection vulnerability in the admin panel. (CVE-2015-4930, CVE-2015-2016 )

Summary IBM QRadar SIEM is vulnerable to a shell command injection the in admin panel if logged in as an admin user. Vulnerability Details CVE-ID: CVE-2015-4930 Description: IBM QRadar could allow a user authenticated with admin access, to execute commands on the server as root. CVSS Base Score:8...

CVE-2015-2016

CVE-2015-2016 (IBM QRadar SIEM) describes a shell command injection vulnerability that can let an admin-authenticated user execute commands on the server as root. Affected products/versions include IBM QRadar SIEM 7.2.x and 7.1 MR2 with patches up to 11 IF02 or 7.2.5 Patch 4; IBM’s bulletin notes...