CVE-2014-0835: CSRF
First published: Thu Jan 30 2014(Updated: )
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM QRadar Security Information and Event Manager | <=7.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/102554
- http://seclists.org/fulldisclosure/2014/Jan/166
- http://secunia.com/advisories/56653
- http://thomaspollet.blogspot.be/2014/01/ibm-qradar-siem-csrf-xss-mitm-rce.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066
- http://www.securityfocus.com/bid/65127
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90678
Frequently Asked Questions
What is the severity of CVE-2014-0835?
CVE-2014-0835 is classified as a medium severity vulnerability.
How do I fix CVE-2014-0835?
To fix CVE-2014-0835, upgrade IBM Security QRadar SIEM to version 7.2.1 or later.
What type of vulnerability is CVE-2014-0835?
CVE-2014-0835 is a Cross-Site Request Forgery (CSRF) vulnerability.
Who is affected by CVE-2014-0835?
CVE-2014-0835 affects IBM Security QRadar SIEM version 7.2 MR1 and earlier.
What can attackers do with CVE-2014-0835?
Attackers exploiting CVE-2014-0835 can hijack the authentication of administrators and modify console Auto Update settings.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/author
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- vendor/ibm
- canonical/ibm qradar security information and event manager
- version/ibm qradar security information and event manager/7.2.0