CVE-2021-38869 — Session Fixation in IBM Qradar Security Information AND Event Manager

CWE-384 — Session Fixation3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.3%
top 42.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Security Information AND Event ManagerIBM Qradar Siem
Timeline
PublishedApr 27
Latest updateApr 28

Description

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/qradar_siem7.3.3, 7.4.3, 7.5.0+2

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vhpp-73wq-mgfq: IBM QRadar SIEM 7↗2022-04-28
▶
CVEList
CVE-2021-38869: IBM QRadar SIEM 7↗2022-04-27
▶
CVE-2021-38869 — Session Fixation in IBM | cvebase