PT-2022-10792 · Ibm · Ibm Qradar Siem

Published 2022-04-27 · Updated 2022-07-12 · CVE-2021-38874

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.3 through 7.5

Description The issue allows users to access information across tenant and domain boundaries in certain situations.

Recommendations For versions 7.3 through 7.5, update to a version that includes a fix for this issue to prevent unauthorized access across tenant and domain boundaries.

Fix

Related Identifiers

CVE-2021-38874

Affected Products

Ibm Qradar Siem

References · 5

• https://ibm.com/support/pages/node/6574787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38874 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38874 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/208397 · Vendor Advisory
• https://t.me/cibsecurity/41508 · Telegram Post