{"id":"CVE-2018-1612","published":"2018-07-17T16:00:00Z","modified":"2024-09-16T23:51:25Z","title":"IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication…","vendor":"IBM","product":"QRadar SIEM","tier":"core","eol":null,"affectedVersions":[{"vendor":"IBM","product":"QRadar SIEM","versions":["7.2","7.3"]}],"description":{"text":"IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive information. IBM X-Force ID: 144164.","provenance":"source","from":"CVE.org"},"summary":{"text":"The IBM QRadar SIEM component QRadar Incident Forensics contains a flaw that lets a remote attacker bypass authentication. An attacker reachable over the network can exploit it without credentials or user interaction, gaining access to sensitive information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:35Z"},"cvss":{"score":5.8,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:C/UI:N/E:U/RC:C/RL:O","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.55667,"percentile":0.99035,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg22017062","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/45005/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/144164","tags":["vdb-entry","x_refsource_XF"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-12191","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-12191","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":45005,"url":"https://www.exploit-db.com/exploits/45005","title":"IBM QRadar SIEM - Remote Code Execution (Metasploit)","type":"remote","platform":"unix","date":"2018-07-11","verified":true,"provenance":"source"},{"id":45005,"url":"https://www.exploit-db.com/exploits/45005","title":"IBM QRadar SIEM - Remote Code Execution (Metasploit)","type":"remote","platform":"unix","date":"2018-07-11","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2018-07-11"},"metasploit":[{"name":"IBM QRadar SIEM Unauthenticated Remote Code Execution","module":"exploit/linux/http/ibm_qradar_unauth_rce","type":"exploit","disclosureDate":"2018-05-28","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibm_qradar_unauth_rce.rb"}],"first":{"date":"2018-05-28","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibm_qradar_unauth_rce.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/45005/"],"flow":[],"timeline":[{"date":"2018-05-28","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2018-07-11","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibm_qradar_unauth_rce.rb","provenance":"source"},{"date":"2018-07-17","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-1612","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":28.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.81,"detail":"percentile 0.9903"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 2 Exploit-DB entries; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":4.06,"detail":"base score 5.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}