CVE-2017-1696: Input Validation

Published Dec 20, 2017

Updated

IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 134178.

Affected Software

6 affected components

IBM QRadar Security Information and Event Manager=7.3.0

IBM QRadar Security Information and Event Manager=7.3.0-patch1

IBM QRadar Security Information and Event Manager=7.3.0-patch2

IBM QRadar Security Information and Event Manager=7.3.0-patch3

IBM QRadar Security Information and Event Manager=7.3.0-patch4

IBM QRadar Security Information and Event Manager=7.3.0-patch5

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22011730

Event History

Dec 20, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1696?

CVE-2017-1696 has a high severity rating as it allows remote authenticated attackers to execute arbitrary commands on affected systems.

How do I fix CVE-2017-1696?

To fix CVE-2017-1696, apply the latest security patches and updates provided by IBM for QRadar versions 7.2 and 7.3.

What systems are affected by CVE-2017-1696?

CVE-2017-1696 affects IBM QRadar Security Information and Event Manager versions 7.2 and 7.3, including various patch levels.

Can CVE-2017-1696 be exploited remotely?

Yes, CVE-2017-1696 can be exploited remotely by authenticated attackers who send specially-crafted requests.

What are the potential impacts of CVE-2017-1696?

The potential impacts of CVE-2017-1696 include unauthorized arbitrary command execution, leading to system compromise.