← Back

CVE-2025-0164

nvd nist
Published: Sep 14, 2025Modified: Jun 17, 2026

JSON object

Loading...
2.3
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Exploitability: 0.8 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unauthorized actions on configuration files due to improper permission assignment.

Affected (15)

Ibm
1 product
Qradar Security Information And Event Manager
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Qradar Security Information And Event Manager
Version 7.5.0
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_10
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_11
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_12
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_13_interim_fix_01
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_1
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_2
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_3
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_4
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_5
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_6
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_7
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_8
Qradar Security Information And Event Manager
Version 7.5.0 update_pack_9

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.