PT-2022-10837 · Ibm · Ibm Qradar Wincollect Agent

Ben Goodspeed + 8 · Published 2022-06-21 · Updated 2022-06-28 · CVE-2021-39006

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar WinCollect Agent versions 10.0 through 10.0.1

Description The issue is related to missing best practices, which could allow an attacker to obtain sensitive information.

Recommendations For IBM QRadar WinCollect Agent versions 10.0 through 10.0.1, update to a version that includes the necessary best practices to prevent sensitive information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-39006

Affected Products

Ibm Qradar Wincollect Agent

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/213549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-39006 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39006 · Vendor Advisory
• https://ibm.com/support/pages/node/6596947 · Vendor Advisory
• https://t.me/cibsecurity/44917 · Telegram Post