IBM QRadar SIEM Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in IBM QRadar SIEM versions 7.5 through 7.5.0 UP13. This vulnerability allows an authenticated user to escalate privileges by exploiting a misconfigured cron job that executes with unnecessary privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing users to gain elevated rights within the application.

Remediation

Users are advised to update to IBM QRadar SIEM version 7.5.0 UP13 IF01. Instructions for downloading this update are available on the IBM Support Fix Central website.