CVE-2021-20401: High severity ibm qradar security information and event manager vulnerability

Q: What is the vulnerability ID for this IBM QRadar vulnerability?

The vulnerability ID is CVE-2021-20401.

Q: What is the severity of CVE-2021-20401 vulnerability?

The severity of CVE-2021-20401 vulnerability is high with a score of 7.8.

Q: What software versions are affected by CVE-2021-20401 vulnerability?

IBM QRadar SIEM 7.3 and 7.4 are affected by CVE-2021-20401 vulnerability.

Q: Are there any fixes available for CVE-2021-20401 vulnerability?

Yes, there are fixes available for CVE-2021-20401 vulnerability.

Q: Where can I find more information about CVE-2021-20401 vulnerability?

You can find more information about CVE-2021-20401 vulnerability on the IBM X-Force ID page and the IBM Support page.

Published May 4, 2021

Updated

IBM QRadar contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Other sources

IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075.

Affected Software

13 affected components

IBM QRadar Security Information and Event Manager>=7.3.0<7.3.3

IBM QRadar Security Information and Event Manager>=7.4.0<7.4.2

IBM QRadar Security Information and Event Manager=7.3.3

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_1

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_2

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_3

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_4

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_5

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_6

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_7

IBM QRadar Security Information and Event Manager=7.4.2

IBM QRadar Security Information and Event Manager=7.4.2-fix_pack_1

IBM QRadar Security Information and Event Manager=7.4.2-fix_pack_2

Event History

May 4, 2021

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

May 5, 2021

CVE Published

via MITRE·03:45 PM

Data Sourced

via MITRE·03:45 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6449682

Frequently Asked Questions

What is the vulnerability ID for this IBM QRadar vulnerability?

The vulnerability ID is CVE-2021-20401.

What is the severity of CVE-2021-20401 vulnerability?