Lucene search
HistoryJul 20, 2022 - 6:15 p.m.
CVE-2021-29755
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
35.6%
IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015.
Affected configurations
Node
linuxlinux_kernelMatch-
ibmqradar_security_information_and_event_managerRange7.3.0–7.3.3
ORibmqradar_security_information_and_event_managerRange7.4.0–7.4.3
ORibmqradar_security_information_and_event_managerMatch7.3.3-
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_1
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_10
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_11
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_2
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_3
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_4
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_5
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_6
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_7
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_8
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_9
ORibmqradar_security_information_and_event_managerMatch7.4.3-
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_1
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_2
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_3
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_4
ORibmqradar_security_information_and_event_managerMatch7.5.0-
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_1
Related
prion
prion
Code injection
2022-07-20 18:15:00
ibm
ibm
cnvd
cnvd
IBM QRadar SIEM Access Control Error Vulnerability (CNVD-2022-83584)
2022-07-21 00:00:00
cvelist
cvelist
CVE-2021-29755
2022-07-19 00:00:00
cve
cve
CVE-2021-29755
2022-07-20 18:15:08
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
35.6%
Related for NVD:CVE-2021-29755