Lucene search
IbmCVE-2014-0838HistoryJan 30, 2014 - 5:17 a.m.
CVE-2014-0838
2014-01-3005:17:46
ibm
web.nvd.nist.gov
23
cve-2014-0838
autoupdate package
ibm security qradar siem
remote attackers
arbitrary console commands
security vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.006
Percentile
79.2%
The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server.
Affected configurations
Node
ibmqradar_security_information_and_event_managerRange≤7.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | qradar_security_information_and_event_manager | * | cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2014-01-30 05:17:00
nvd
nvd
CVE-2014-0838
2014-01-30 05:17:46
cvelist
cvelist
CVE-2014-0838
2014-01-30 02:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.006
Percentile
79.2%
Related for CVE-2014-0838