CVE-2023-26273: IBM QRadar security bypass
IBM QRadar could allow an authenticated user to perform unauthorized actions due to hazardous input validation.
Other sources
IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 248134.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26273?
The severity of CVE-2023-26273 is medium with a severity value of 4.3.
How does IBM QRadar SIEM 7.5.0 vulnerability CVE-2023-26273 allow unauthorized actions?
CVE-2023-26273 allows an authenticated user to perform unauthorized actions due to hazardous input validation.
Which versions of IBM QRadar SIEM are affected by CVE-2023-26273?
IBM QRadar SIEM versions 7.5.0, 7.5.0-update_pack_1, 7.5.0-update_pack_2, 7.5.0-update_pack_3, 7.5.0-update_pack_4, and 7.5.0-update_pack_5 are affected by CVE-2023-26273.
How can I fix the vulnerability in IBM QRadar SIEM 7.5.0?
There is no specific fix mentioned for CVE-2023-26273, but it is recommended to keep IBM QRadar SIEM up to date with the latest security patches and follow IBM's recommendations for secure configuration.
Where can I find more information about CVE-2023-26273?
You can find more information about CVE-2023-26273 on the IBM X-Force Exchange website (https://exchange.xforce.ibmcloud.com/vulnerabilities/248134) and the IBM Support page (https://www.ibm.com/support/pages/node/7006083).