IBM Security Bulletin: IBM QRadar SIEM is vulnerable to XML External Entity Injection (CVE-2018-1730)
The product does not disable external XML Entity Processsing which can lead to information disclosure and denial of service attacks.
CVE(s): CVE-2018-1730
Affected product(s) and affected version(s):
IBM QRadar SIEM 7.2.0 to 7.2.8 Patch 13
IBM QRadar SIEM 7.3.0 to 7.3.1 Patch 6
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10742741&myns=swgother&mynp=OCSSBQAC&mync=E&cm_sp=swgother-_-OCSSBQAC-_-E
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/147709
The post IBM Security Bulletin: IBM QRadar SIEM is vulnerable to XML External Entity Injection (CVE-2018-1730) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/2Edlara