CVE-2017-1234: XSS

Published Jun 27, 2017

Updated

IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913.

Affected Software

17 affected components

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

IBM QRadar Security Information and Event Manager=7.2.8

IBM QRadar Security Information and Event Manager=7.2.8-p1

IBM QRadar Security Information and Event Manager=7.2.8-p2

IBM QRadar Security Information and Event Manager=7.2.8-p3

IBM QRadar Security Information and Event Manager=7.2.8-p4

IBM QRadar Security Information and Event Manager=7.2.8-p5

IBM QRadar Security Information and Event Manager=7.2.8-p6

IBM QRadar Security Information and Event Manager=7.3.0

IBM QRadar Security Information and Event Manager=7.3.0-p1

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22004948

Event History

Jun 27, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1234?

CVE-2017-1234 has a medium severity rating, indicating a moderate risk to systems using affected versions of IBM QRadar.

How do I fix CVE-2017-1234?

To fix CVE-2017-1234, update IBM QRadar to version 7.3.0 or later which contains the necessary security fixes.

What systems are affected by CVE-2017-1234?

CVE-2017-1234 affects IBM QRadar versions 7.2.0 through 7.2.8 and 7.3.0.

What type of vulnerability is CVE-2017-1234?

CVE-2017-1234 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary JavaScript code.

What are the consequences of CVE-2017-1234?

The potential consequences of CVE-2017-1234 include credentials disclosure and unauthorized manipulation of the QRadar Web UI.