PT-2022-9931 · Ibm · Ibm Qradar Siem

Published 2022-04-27 · Updated 2022-07-12 · CVE-2021-29776

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.3 through 7.5

Description The issue allows an authenticated user to obtain sensitive information from another user's dashboard by providing the dashboard ID of that user.

Recommendations For versions 7.3 through 7.5, consider restricting access to dashboard IDs to prevent unauthorized users from obtaining sensitive information. As a temporary workaround, consider implementing additional authentication or authorization checks for dashboard access until a patch is available. Restrict access to sensitive information within dashboards to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2021-29776

Affected Products

Ibm Qradar Siem

References · 5

• https://ibm.com/support/pages/node/6574787 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29776 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29776 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/203030 · Vendor Advisory
• https://t.me/cibsecurity/41522 · Telegram Post