CVE-2025-33141 PUBLISHED

IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

Assigner: ibm
Reserved: 15.04.2025 Published: 18.09.2026 Updated: 18.09.2026

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 6.5

Product Status

Vendor IBM
Product QRadar
Versions
  • affected from 7.5.0 to 7.5.0 UP15 Interim Fix 006 (incl.)

Solutions

ProductVersionFixIBM QRadar SIEM 7.5.0

7.5.0 UP16 https://www.ibm.com/support/pages/node/7283630

References

Problem Types

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE