CVE-2021-39006

3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 65.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Qradar Wincollect AgentIBM Qradar Wincollect
Timeline
PublishedJun 21
Latest updateJun 22

Description

IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/qradar_wincollect_agent10.0, 10.0.1+1
▶NVDibm/qradar_wincollect10.0, 10.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-wv6j-phcv-pxw6: IBM QRadar WinCollect Agent 10↗2022-06-22
▶
CVEList
CVE-2021-39006: IBM QRadar WinCollect Agent 10↗2022-06-21
▶
CVE-2021-39006 (MEDIUM CVSS 5.3) | IBM QRadar WinCollect Agent 10.0 an | cvebase.io