← Back

CVE-2024-56462

nvd nist
Published: May 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 002 could allow a privileged user to upload a malicious backup archive that could be restored and used to gain access to the underlying operating system.

Affected (22)

Ibm
1 product
Qradar Security Information And Event Manager
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Qradar Security Information And Event Manager
Version 7.5.0
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_10
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_11
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_12
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_02
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_14
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_14_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_14_interim_fix_02
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_15
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_15_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_15_interim_fix_02
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_1
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_2
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_3
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_4
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_5
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_6
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_7
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_8
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_9

Related CWEs

CWE-530
Exposure of Backup File to an Unauthorized Control Sphere
A backup file is stored in a directory or archive that is made accessible to unauthorized actors.
CWE-552
Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.