CVE-2025-33120

Published: Aug 22, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@us.ibm.com (Secondary)

Description

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges.

Affected (28)

Products: Ibm: Qradar Incident Forensics, Qradar Security Information And Event Manager

Ibm

2 products

Qradar Incident Forensics

Qradar Security Information And Event Manager

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Incident Forensics	Version 7.5.0
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_10
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_11
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_12
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_13
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_1
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_2
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_3
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_4
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_5
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_6
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_7
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_8
Ibm Qradar Incident Forensics	Version 7.5.0 update_pack_9
Ibm Qradar Security Information And Event Manager	Version 7.5.0
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_10
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_11
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_12
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_13
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_1
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_2
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_3
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_4
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_5
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_6
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_7
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_8
Ibm Qradar Security Information And Event Manager	Version 7.5.0 update_pack_9

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (1)

https://www.ibm.com/support/pages/node/7242869

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.