First published: Mon Jun 03 2013(Updated: )
Unspecified vulnerability in IBM QRadar Security Information and Event Manager (SIEM) 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM QRadar Security Information and Event Manager | =7.0.0 | |
IBM QRadar Security Information and Event Manager | =7.0.1 | |
IBM QRadar Security Information and Event Manager | =7.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-2970 is considered a critical vulnerability due to the potential for remote command execution.
To mitigate CVE-2013-2970, update IBM QRadar Security Information and Event Manager to version 7.1 MR2 Patch 1 or later.
CVE-2013-2970 affects IBM QRadar versions 7.0.0, 7.0.1, and 7.1.0.
No, CVE-2013-2970 requires remote authenticated users for exploitation.
CVE-2013-2970 allows authenticated users to execute arbitrary operating-system commands.