Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveIbmCVE-2021-29780
HistoryJul 19, 2021 - 4:15 p.m.

CVE-2021-29780

2021-07-1916:15:08
CWE-20
ibm
web.nvd.nist.gov
21
3
ibm
resilient
onprem
v41.1
authenticated user
unauthorized action
input validation
security vulnerability

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

32.3%

JSON

IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.

Affected configurations

Nvd
Vulners
Node
ibmresilient_security_orchestration_automation_and_responseRange≤41.1
VendorProductVersionCPE
ibmresilient_security_orchestration_automation_and_response*cpe:2.3:a:ibm:resilient_security_orchestration_automation_and_response:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Resilient OnPrem",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "41"
      }
    ]
  }
]

Social References

More

Related

prion 1
nvd 1
ibm 1
cvelist 1
prion
prion
Input validation
2021-07-19 16:15:00
nvd
nvd
CVE-2021-29780
2021-07-19 16:15:08
ibm
ibm
Security Bulletin: IBM Security SOAR could allow a privileged user to import non-approved Python2 modules (CVE-2021-29780).
2021-07-16 16:51:42
cvelist
cvelist
CVE-2021-29780
2021-07-19 16:00:28

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

32.3%

JSON
Related for CVE-2021-29780
prion1nvd1ibm1cvelist1