CVE-2021-29757

CVE-2021-29757 affects IBM QRadar User Behavior Analytics (UBA) add-on for QRadar SIEM. A cross-site request forgery (CSRF) vulnerability exists due to improper CSRF checking in some components, enabling attackers to perform malicious, authorized actions from a trusted user’s session. The IBM bul...

Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM performs improper CSRF checking for some components ( CVE-2021-29757)

Summary User Behavior Analytics application add on to IBM QRadar SIEM performs improper CSRF checking for some components. Vulnerability Details CVEID: CVE-2021-29757 DESCRIPTION: IBM QRadar User Behavior Analytics is vulnerable to cross-site request forgery which could allow an attacker to execu...