CVE-2021-20391 — Insecure Storage of Sensitive Information in IBM Qradar User Behavior Analytics

CWE-922 — Insecure Storage of Sensitive Information3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.0%
top 87.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar User Behavior AnalyticsIBM Qradar Siem
Timeline
PublishedMay 14
Latest updateMay 24

Description

IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem1.0.0, 4.1.1+1

🔴Vulnerability Details

2
GHSA
GHSA-xfq2-689p-9p2m: IBM QRadar User Behavior Analytics 1↗2022-05-24
▶
CVEList
CVE-2021-20391: IBM QRadar User Behavior Analytics 1↗2021-05-14
▶
CVE-2021-20391 — IBM vulnerability | cvebase