CVE-2021-29704

CVE-2021-29704 affects IBM Security SOAR (Resilient) on-premises, stemming from use of weaker-than-expected cryptographic algorithms that could lead to information disclosure. The IBM Security SOAR/Resilient DR system allows TLS 1.0 connections, enabling potential decryption of highly sensitive i...

CVE-2021-29802

IBM Security SOAR (Resilient App Host) is affected by CVE-2021-29802. The vulnerability arises from performing an operation at a privilege level higher than the minimum required, potentially creating or amplifying weaknesses. Affected product: Resilient OnPrem (IBM Security SOAR). Remediation: up...

CVE-2020-4633

CVE-2020-4633 affects IBM Resilient OnPrem/IBM Security SOAR. The IBM security bulletin describes a formula-injection vulnerability in Excel reports generated by the Resilient platform, caused by improper input validation that could allow remote execution of arbitrary code. Affected products incl...

CVE-2020-4636

CVE-2020-4636 affects IBM Resilient OnPrem (IBM Security SOAR), where a privileged user could inject malicious commands via Python3 scripting (sys module). Root cause involves Python3 scripting capability enabled in Resilient OnPrem 38.2 beta/GA, leading to command injection. Published details in...

CVE-2021-20567

IBM Resilient OnPrem (Resilient App Host components) is affected by CVE-2021-20567 where secrets are stored unencrypted by default, enabling a local privileged attacker to access sensitive information. The issue arises from improper or nonexisting encryption within the App Host, which can expose ...

CVE-2019-4533

CVE-2019-4533 affects IBM Resilient SOAR (v38.0 on IBM Resilient OnPrem). The vulnerability arises from insufficient input validation in form fields for POST/PUT/PATCH requests, allowing a denial of service on the SOAR Platform. The IBM bulletin specifies a remediation: upgrade to v38.0 and apply...

CVE-2021-29780

IBM Resilient OnPrem (IBM Security SOAR) is affected by CVE-2021-29780 due to improper input validation, enabling an authenticated user to perform actions they should not access. The affected product is Resilient OnPrem v41.1. The advisory in connected documents states the remedy is to upgrade to...

CVE-2019-4579

CVE-2019-4579 affects IBM Resilient OnPrem (Resilient SOAR) v38.x. The vulnerability arises from incomplete blacklisting in input validation on form fields, allowing attackers to bypass application controls and cause direct impact to system and data integrity. IBM’s security bulletin notes a deni...

CVE-2021-20566

CVE-2021-20566 concerns IBM Resilient OnPrem (IBM Security SOAR) where TLS1.2 ciphers not enabled for Perfect Forward Secrecy allow potential decryption of sensitive data if an attacker records traffic. The IBM security bulletin notes the vulnerability stems from weaker cryptographic algorithms; ...

CVE-2020-4864

CVE-2020-4864 affects IBM Resilient OnPrem (SOAR) where the X-Forwarded-For header/logging can cause the server to register a spoofed source IP when accessed from a restricted internal network. Root cause: improper handling of the X-Forwarded-For header allowing an attacker on the internal networ...