RULE(RULE ID:321845)

Rule General Information
Release Date: 2019-06-14
Rule Name: QRadar Remote Command Execution Vulnerability (CVE-2018-1418)
Severity:
CVE ID:
Rule Protection Details
Description: IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM X-Force ID: 138824.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: ExploitDB:45005
http://www.ibm.com/support/docview.wss?uid=swg22015797
https://exchange.xforce.ibmcloud.com/vulnerabilities/138824
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
http://www-01.ibm.com/support/docview.wss?uid=swg22015797