Security Bulletin: IBM QRadar SIEM is vulnerable to OS command injection. (CVE-2016-2875)

Summary It is possible to inject a payload with OS Commands in QRadar which are run as root on the host OS. Vulnerability Details CVE-ID: CVE-2016-2875 Description: IBM QRadar could allow an authenticated user to inject operating system commands that would be executed with root privileges. CVSS...

CVE-2016-2875

IBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to execute arbitrary OS commands as root via unspecified vectors...

CVE-2016-2875

CVE-2016-2875 affects IBM QRadar SIEM 7.1.x and 7.2.x up to 7.2.7. An authenticated user can inject and execute operating system commands with root privileges via unspecified vectors. The IBM bulletin confirms the vulnerability class as OS command injection and lists affected versions as 7.1.n an...