IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089.
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/7149968 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/272089 | vdb entry |