Security Bulletin: IBM QRadar SIEM is vulnerable to remote code execution. (CVE-2015-4956)

Summary Remote Code Execution in QRadar Web UI. Vulnerability Details CVE-ID: CVE-2015-4956 Description: IBM QRadar contains a remote code execution vulnerability could allow an authenticated user to execute certain commands on the underlying operating system using an unprivileged system account...

CVE-2015-4956

IBM QRadar SIEM Web UI contains a remote code execution vulnerability (CVE-2015-4956) affecting QRadar SIEM 7.1.x before 7.1 MR2 Patch 12. An authenticated user could execute arbitrary operating-system commands on the underlying host through the Web UI. The public fixes are available as 7.1 MR2 P...