CVE-2014-0838

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server.

Score

CVSS 2.0 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2014-01-30

Last modified

2024-08-06

Affected products

• Qradar Security Information And Event Manager (Ibm)

References

• http://osvdb.org/102553
• http://www-01.ibm.com/support/docview.wss?uid=swg21663066
• http://www.securityfocus.com/bid/65127
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90681