CVE-2016-9727: Input Validation

Published Mar 7, 2017

Updated

IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference #: 1999542.

Affected Software

18 affected components

IBM QRadar Incident Forensics=7.2.0

IBM QRadar Incident Forensics=7.2.1

IBM QRadar Incident Forensics=7.2.2

IBM QRadar Incident Forensics=7.2.3

IBM QRadar Incident Forensics=7.2.4

IBM QRadar Incident Forensics=7.2.5

IBM QRadar Incident Forensics=7.2.6

IBM QRadar Incident Forensics=7.2.7

IBM QRadar Incident Forensics=7.2.8

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

IBM QRadar Security Information and Event Manager=7.2.8

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21999542

Event History

Mar 7, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9727?

CVE-2016-9727 has a high severity level, allowing remote authenticated attackers to execute arbitrary commands on affected systems.

How do I fix CVE-2016-9727?

To fix CVE-2016-9727, upgrade IBM QRadar Incident Forensics or Security Information and Event Manager to the latest version available.

Which software versions are affected by CVE-2016-9727?

CVE-2016-9727 affects IBM QRadar Incident Forensics and Security Information and Event Manager versions 7.2.0 through 7.2.8.

Can CVE-2016-9727 be exploited remotely?

Yes, CVE-2016-9727 can be exploited by remote authenticated attackers through specially crafted requests.

What impact does CVE-2016-9727 have on affected systems?

Successful exploitation of CVE-2016-9727 can lead to unauthorized execution of arbitrary commands, compromising the affected system's integrity.