CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: the xmlrpc.cgi webmin script in ibm qradar siem 7.1 mr2 before patch 11 if02 and 7.2.x before 7.2.5 patch 4 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-10-04
Last Modified Date: 2015-10-05