IBM QRadar Suite Software/Cloud Pak for Security up to 1.10.21.0 improper validation of specified type of input

Summaryinfo

A vulnerability labeled as critical has been found in IBM QRadar Suite Software and Cloud Pak for Security up to 1.10.21.0. The impacted element is an unknown function. Such manipulation leads to improper validation of specified type of input. This vulnerability is referenced as CVE-2023-47726. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in IBM QRadar Suite Software and Cloud Pak for Security up to 1.10.21.0 and classified as critical. Affected by this issue is an unknown part. The manipulation with an unknown input leads to a improper validation of specified type of input vulnerability. Using CWE to declare the problem leads to CWE-1287. The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type. Impacted is confidentiality, integrity, and availability. CVE summarizes:

IBM QRadar Suite Software 1.10.12.0 through 1.10.21.0 and IBM Cloud Pak for Security 1.10.12.0 through 1.10.21.0 could allow an authenticated user to execute certain arbitrary commands due to improper input validation. IBM X-Force ID: 272087.

The advisory is shared for download at ibm.com. This vulnerability is handled as CVE-2023-47726 since 11/09/2023. The exploitation is known to be easy. The attack may be launched remotely. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at X-Force (272087). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Cloud Software

Vendor

• IBM

Name

• Cloud Pak for Security
• QRadar Suite Software

Version

• 1.10.0
• 1.10.1
• 1.10.2
• 1.10.3
• 1.10.4
• 1.10.5
• 1.10.6
• 1.10.7
• 1.10.8
• 1.10.9
• 1.10.10
• 1.10.11
• 1.10.12
• 1.10.13
• 1.10.14
• 1.10.15
• 1.10.16
• 1.10.17
• 1.10.18
• 1.10.19
• 1.10.20
• 1.10.21.0

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion