Medium WID-SEC-2024-3317 6 CVEs

IBM QRadar SIEM: Mehrere Schwachstellen

Published Oct 30, 2024 · Updated Mar 17, 2025 · Revision 2 · de-DE

Vendor: IBM Product: QRadar SIEM Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen, unspezifische Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.

Product

IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.

Vulnerabilities 6

High 7.5

CVE-2024-39689 Public exploit

Certifi removes GLOBALTRUST root certificate

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi…

certifi python-certifi katib-suggestion-hyperopt katib-earlystopping Debian Wolfi PyPI

Jul 5, 2024
Medium 6.2

CVE-2024-3651 Public exploit

Denial of Service via Quadratic Complexity in kjd/idna

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a…

kjd kjd/idna katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jul 7, 2024
Medium 6.2

CVE-2024-5569

Denial of Service via crafted zip file in jaraco/zipp

A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile …

jaraco jaraco/zipp kubeflow-pipelines-apiserver tensorflow Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jul 9, 2024
Medium 5.6

CVE-2024-35195

Requests `Session` object does not verify requests after making first request with verify=False

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification r…

psf requests katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

May 20, 2024
Medium 4.8

CVE-2024-34062

tqdm CLI arguments injection attack

tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed through python's `eval`, allowing arbitrary code execution. This issue is only locally exploitable and had be…

tqdm tqdm katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

May 3, 2024
Medium 4.4

CVE-2024-37891

Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3

urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3'…

urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Wolfi PyPI

Jun 17, 2024

Revision history

2025-03-17 #2
Neue Updates von IBM aufgenommen
2024-10-30 #1
Initiale Fassung

References

IBM Security Bulletin vom 2024-10-30
https://www.ibm.com/support/pages/node/7174420
IBM Security Bulletin 7186423 vom 2025-03-17
https://www.ibm.com/support/pages/node/7186423