CVEvulnerability
CVE-2014-0835
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
Affected configurations
• ibm qradar security information and event manager (<= 7.2.0)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/102554 osvdb.org
- http://seclists.org/fulldisclosure/2014/Jan/166 seclists.org
- http://secunia.com/advisories/56653 secunia.com
- http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html thomaspollet.blogspot.be
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066 Vendor Advisory
- http://www.securityfocus.com/bid/65127 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90678 exchange.xforce.ibmcloud.com
- http://osvdb.org/102554 osvdb.org
- http://seclists.org/fulldisclosure/2014/Jan/166 seclists.org
- http://secunia.com/advisories/56653 secunia.com
- http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html thomaspollet.blogspot.be
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066 Vendor Advisory
- http://www.securityfocus.com/bid/65127 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90678 exchange.xforce.ibmcloud.com