Lucene search
HistoryJul 20, 2022 - 6:15 p.m.
CVE-2021-38936
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
23.8%
IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893.
Affected configurations
Node
linuxlinux_kernelMatch-
ibmqradar_security_information_and_event_managerRange7.3.0–7.3.3
ORibmqradar_security_information_and_event_managerRange7.4.0–7.4.3
ORibmqradar_security_information_and_event_managerMatch7.3.3-
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_1
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_10
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_11
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_2
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_3
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_4
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_5
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_6
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_7
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_8
ORibmqradar_security_information_and_event_managerMatch7.3.3fix_pack_9
ORibmqradar_security_information_and_event_managerMatch7.4.3-
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_1
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_2
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_3
ORibmqradar_security_information_and_event_managerMatch7.4.3fix_pack_4
ORibmqradar_security_information_and_event_managerMatch7.5.0-
ORibmqradar_security_information_and_event_managerMatch7.5.0update_pack_1
Related
ibm
ibm
cvelist
cvelist
CVE-2021-38936
2022-07-19 00:00:00
cve
cve
CVE-2021-38936
2022-07-20 18:15:08
cnvd
cnvd
IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2022-83586)
2022-07-21 00:00:00
prion
prion
Code injection
2022-07-20 18:15:00
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
23.8%
Related for NVD:CVE-2021-38936