Multiple IBM QRadar Products CVE-2014-4831 Session Hijacking Vulnerability

Bugtraq ID:	71348
Class:	Input Validation Error
CVE:	CVE-2014-4831
Remote:	Yes
Local:	No
Published:	Nov 28 2014 12:00AM
Updated:	Nov 28 2014 12:00AM
Credit:	Paul Ionescu, Brennan Brazeau, John Zuccato, Jonathan Fitz-Gerald, and Warren Moynihan
Vulnerable:
Not Vulnerable:

Multiple IBM QRadar Products CVE-2014-4831 Session Hijacking Vulnerability

Multiple IBM QRadar Products are prone to a session-hijacking vulnerability.

An attacker can leverage this issue to gain unauthorized access to the affected application.

Multiple IBM QRadar Products CVE-2014-4831 Session Hijacking Vulnerability

An attacker can exploit this issue using readily available tools.

Multiple IBM QRadar Products CVE-2014-4831 Session Hijacking Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM QRadar Products CVE-2014-4831 Session Hijacking Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM QRadar SIEM HomePage (IBM)
  
• Security Bulletin: Multiple vulnerabilities found in IBM QRadar SIEM and QRadar (IBM)