IBM Security Bulletin: Apache Commons Collection as used in IBM QRadar SIEM is vulnerable to remote code execution. (CVE-2015-6420)

IBM QRadar SIEM includes vulnerable components (e.g., framework libraries) that may be identified and exploited with automated tools.

CVE(s): CVE-2015-6420

Affected product(s) and affected version(s):

· QRadar SIEM 7.2-7.2.8 Patch 9
· QRadar SIEM 7.3-7.3 Patch 5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2AYG8s6
X-Force Database: http://ift.tt/1O48BYg

The post IBM Security Bulletin: Apache Commons Collection as used in IBM QRadar SIEM is vulnerable to remote code execution. (CVE-2015-6420) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2AZTMez