CVE-2014-0835: CSRF
Published Jan 30, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify console Auto Update settings.
Affected Software
1 affected component
IBM QRadar Security Information and Event Manager<=7.2.0
Event History
Jan 30, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0835?
CVE-2014-0835 is classified as a medium severity vulnerability.
2
How do I fix CVE-2014-0835?
To fix CVE-2014-0835, upgrade IBM Security QRadar SIEM to version 7.2.1 or later.
3
What type of vulnerability is CVE-2014-0835?
CVE-2014-0835 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
Who is affected by CVE-2014-0835?
CVE-2014-0835 affects IBM Security QRadar SIEM version 7.2 MR1 and earlier.
5
What can attackers do with CVE-2014-0835?
Attackers exploiting CVE-2014-0835 can hijack the authentication of administrators and modify console Auto Update settings.