Lucene search
IbmCVELIST:CVE-2021-38878HistoryApr 27, 2022 - 3:20 p.m.
CVE-2021-38878
2022-04-2715:20:33
ibm
www.cve.org
5
ibm
qradar
vulnerability
key exchange
entity authentication
x-force id
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
26.8%
IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.
CNA Affected
[
{
"product": "QRadar SIEM",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "7.3.3"
},
{
"status": "affected",
"version": "7.4.3"
},
{
"status": "affected",
"version": "7.5.0"
}
]
}
]Related
prion
prion
Authentication flaw
2022-04-27 16:15:00
nvd
nvd
CVE-2021-38878
2022-04-27 16:15:11
cve
cve
CVE-2021-38878
2022-04-27 16:15:11
ibm
ibm
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
26.8%
Related for CVELIST:CVE-2021-38878