Description
The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server.
References
- 102553 vdb-entry
- 65127 vdb-entry
- ibm-qradar-cve20140838-command-exec(90681) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21663066