CVE-2025-33141: IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
Other sources
IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM QRadar SIEMto a version that resolves this vulnerability.Fixed in 7.5.0 UP16Patch UP16 - Compensating control
Ensure permissions on QRadar backup files are corrected so an authenticated user cannot obtain sensitive information from backup files (issue described as incorrect permissions assignment in QRadar SIEM 7.5.0 through 7.5.0 UP15 Interim Fix 006).
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated IBM QRadar SIEM user can exploit it. The vulnerability does not require user interaction and is reachable over the network.
What versions are affected?
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 are identified as affected.
What information is at risk?
Sensitive information contained in backup files may be exposed because of incorrect permission assignment. The provided information does not specify the types of sensitive data in those backups.