CVE-2015-2009: CSRF
Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 Interim Fix 02 and 7.2.x before 7.2.5 Patch 4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences via vectors related to webmin. IBM X-Force ID: 103921.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2009?
CVE-2015-2009 is classified as a moderate-severity vulnerability due to its potential for CSRF attacks.
How do I fix CVE-2015-2009?
To fix CVE-2015-2009, users should upgrade to IBM QRadar SIEM versions 7.1 before MR2 Patch 11 Interim Fix 02 or 7.2.x before 7.2.5 Patch 4.
What type of vulnerability is CVE-2015-2009?
CVE-2015-2009 is a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack user authentication.
Which IBM QRadar versions are affected by CVE-2015-2009?
CVE-2015-2009 affects IBM QRadar versions 7.1 before MR2 Patch 11 Interim Fix 02 and 7.2.x before 7.2.5 Patch 4.
Can CVE-2015-2009 lead to XSS attacks?
Yes, CVE-2015-2009 can facilitate CSRF attacks that may insert XSS sequences into requests.