Adrian Johnson
TLDR:
– IBM QRadar Suite Software and Cloud Pak for Security have a significant vulnerability that allows attackers to execute arbitrary JavaScript code.
– The vulnerability, identified as CVE-2023-47731, affects IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0.
A significant vulnerability in IBM QRadar Suite Software and Cloud Pak for Security has been discovered, allowing attackers to execute arbitrary JavaScript code. This vulnerability, known as CVE-2023-47731, has a base score of 5.4 and affects IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0, as well as IBM QRadar Suite Software versions 1.10.12.0 through 1.10.19.0. This vulnerability enables users to insert malicious JavaScript code into the Web UI, potentially leading to the disclosure of credentials within a trusted session. Cross-site scripting (XSS) vulnerabilities can occur when untrusted data enters a web application, allowing attackers to manipulate the intended functionality and expose sensitive information. To mitigate this risk, users are advised to apply patches, upgrades, or recommended workarounds promptly to safeguard their systems.
The IBM QRadar Suite Software is designed to assist with threat detection and response, offering security teams the ability to address threats efficiently and accurately. Similarly, the Cloud Pak for Security aims to connect disparate data sources to identify hidden threats and support risk-based decision-making, all while maintaining data integrity.
Guru Baran is the author of this article and is a co-founder of Cyber Security News and GBHackers On Security. With over 10 years of experience in cybersecurity, technology, and communications, Baran serves as a seasoned Security Consultant, Editor, and Analyst in the field.
