CVE-2018-1418

This Metasploit module exploits a chain of vulnerabilities in IBM QRadar SIEM (CVE-2016-9722, CVE-2018-1418, CVE-2018-1612) to achieve unauthenticated remote code execution. It bypasses authentication via session cookie fixation, writes a malicious script to disk, and escalates privileges to root via database manipulation.

This Metasploit module exploits a chain of vulnerabilities in IBM QRadar SIEM's Forensics web application to achieve unauthenticated remote code execution. It bypasses authentication via session cookie fixation, writes a file to disk, and escalates privileges to root by manipulating the database to execute a shell script.