CVE-2021-29755 — Improper Certificate Validation in IBM Qradar Security Information AND Event Manager

CWE-295 — Improper Certificate Validation3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 73.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Security Information AND Event ManagerIBM Qradar Siem
Timeline
PublishedJul 20
Latest updateJul 21

Description

IBM QRadar SIEM 7.3, 7.4, and 7.5 does not preform proper certificate validation for some inter-host communications. IBM X-Force ID: 202015.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem6 versions+5

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mv8m-2w22-fqhx: IBM QRadar SIEM 7↗2022-07-21
▶
CVEList
CVE-2021-29755: IBM QRadar SIEM 7↗2022-07-20
▶
CVE-2021-29755 — Improper Certificate Validation in IBM | cvebase