Multiple IBM QRadar Products CVE-2014-4827 Cross Site Scripting Vulnerability

Bugtraq ID:	71075
Class:	Input Validation Error
CVE:	CVE-2014-4827
Remote:	Yes
Local:	No
Published:	Oct 08 2014 12:00AM
Updated:	Oct 08 2014 12:00AM
Credit:	Paul Ionescu, Brennan Brazeau, John Zuccato, Jonathan Fitz-Gerald, and Warren Moynihan.
Vulnerable:	Juniper Security Threat Response Manager 2013.2 Juniper Security Threat Response Manager 2012.1 Juniper Secure Analytics 2014.2 Juniper Secure Analytics 2014.1 Juniper Secure Analytics 2013.2 IBM QRadar Vulnerability Manager 7.2 MR2 IBM QRadar Security Information and Event Manager 7.2 MR2 IBM QRadar Security Information and Event Manager 7.2 IBM QRadar Security Information and Event Manager 7.1MR1 IBM QRadar Security Information and Event Manager 7.1 IBM QRadar Risk Manager 7.2 MR2 IBM QRadar Risk Manager 7.1MR1
Not Vulnerable:	Juniper Security Threat Response Manager 2013.2R9 Juniper Secure Analytics 2014.3R1 Juniper Secure Analytics 2013.2R9

Multiple IBM QRadar Products CVE-2014-4827 Cross Site Scripting Vulnerability

Multiple IBM QRadar Products are prone to an unspecified cross-site scripting vulnerability because they fail to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials.

The following product versions are affected:

IBM QRadar Vulnerability Manager 7.2 MR2
IBM QRadar Risk Manager 7.2 MR2, and 7.1 MR1
IBM QRadar Security Information and Event Manager 7.1, 7.2, 7.2 MR2, and 7.1 MR1

Multiple IBM QRadar Products CVE-2014-4827 Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Multiple IBM QRadar Products CVE-2014-4827 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.