CVE-2023-26273: IBM QRadar security bypass

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/248134
• https://www.ibm.com/support/pages/node/7006083 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7006083

Frequently Asked Questions

• What is the severity of CVE-2023-26273?

  The severity of CVE-2023-26273 is medium with a severity value of 4.3.

• How does IBM QRadar SIEM 7.5.0 vulnerability CVE-2023-26273 allow unauthorized actions?

  CVE-2023-26273 allows an authenticated user to perform unauthorized actions due to hazardous input validation.

• Which versions of IBM QRadar SIEM are affected by CVE-2023-26273?

  IBM QRadar SIEM versions 7.5.0, 7.5.0-update_pack_1, 7.5.0-update_pack_2, 7.5.0-update_pack_3, 7.5.0-update_pack_4, and 7.5.0-update_pack_5 are affected by CVE-2023-26273.

• How can I fix the vulnerability in IBM QRadar SIEM 7.5.0?

  There is no specific fix mentioned for CVE-2023-26273, but it is recommended to keep IBM QRadar SIEM up to date with the latest security patches and follow IBM's recommendations for secure configuration.

• Where can I find more information about CVE-2023-26273?

  You can find more information about CVE-2023-26273 on the IBM X-Force Exchange website (https://exchange.xforce.ibmcloud.com/vulnerabilities/248134) and the IBM Support page (https://www.ibm.com/support/pages/node/7006083).