NetSight
critical9.0

CVE-2015-2011

The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitr…

Impact

The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.

Affected products

VendorProductAffected versions
IbmQradar Security Information And Event Manager
Versions 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4

Weakness classification

References