CVE-2014-4828: Input Validation
Published Oct 19, 2014
·Updated
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 allows remote attackers to conduct clickjacking attacks via a crafted HTTP request.
Affected Software
2 affected components
IBM QRadar Security Information and Event Manager=7.1.0
IBM QRadar Security Information and Event Manager=7.2.0
Event History
Oct 19, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4828?
CVE-2014-4828 is classified as a medium severity vulnerability due to its potential for clickjacking attacks.
2
How do I fix CVE-2014-4828?
To remediate CVE-2014-4828, update your IBM QRadar SIEM to at least version 7.1 MR2 or 7.2 MR3.
3
What types of attacks can CVE-2014-4828 facilitate?
CVE-2014-4828 can facilitate clickjacking attacks, allowing unauthorized actions to be taken on behalf of legitimate users.
4
Which versions of IBM QRadar are affected by CVE-2014-4828?
CVE-2014-4828 affects IBM QRadar Security Information and Event Manager versions 7.1 MR1 and 7.2 MR2.
5
Are there any known exploits for CVE-2014-4828?
While no specific exploits have been publicly documented for CVE-2014-4828, the vulnerability allows for clickjacking, which can be potentially exploited.