IBM QRadar Security Information and Event Manager Remote Code Execution Vulnerability

Bugtraq ID:	70111
Class:	Unknown
CVE:	CVE-2014-3062
Remote:	Yes
Local:	No
Published:	Sep 05 2014 12:00AM
Updated:	Sep 05 2014 12:00AM
Credit:	Paul Ionescu and Brennan Brazeau
Vulnerable:	IBM QRadar Security Information and Event Manager 7.2 MR2 IBM QRadar Security Information and Event Manager 7.1 MR2
Not Vulnerable:

IBM QRadar Security Information and Event Manager Remote Code Execution Vulnerability

IBM QRadar Security Information and Event Manager is prone to a remote code-execution vulnerability.

An attacker may leverage this issue to execute arbitrary code with root privileges.

IBM QRadar Security Information and Event Manager Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM QRadar Security Information and Event Manager Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM QRadar Security Information and Event Manager Remote Code Execution Vulnerability

References:

• IBM QRadar SIEM HomePage (IBM)
  
• Security Bulletin: Unspecified weaknesses in the QRadar appliance 7.1 MR2 and 7. (IBM)