CVE-2021-20567: Medium severity ibm resilient vulnerability

Q: What is CVE-2021-20567?

CVE-2021-20567 is a vulnerability in IBM Resilient OnPrem that allows a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.

Q: How severe is CVE-2021-20567?

CVE-2021-20567 has a severity score of 4.4 (medium).

Q: Which software versions are affected by CVE-2021-20567?

IBM Resilient OnPrem versions up to and including IBM Security SOAR V38.0 are affected by CVE-2021-20567.

Q: How can I fix CVE-2021-20567?

To fix CVE-2021-20567, update IBM Resilient OnPrem to a version that includes proper encryption for sensitive information.

Q: Where can I find more information about CVE-2021-20567?

More information about CVE-2021-20567 can be found at the following IBM X-Force ID: 199239.

Published Jun 8, 2021

Updated

IBM Resilient OnPrem could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.

Other sources

IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239.

Affected Software

3 affected components

IBM Resilient Security Orchestration Automation And Response=38.0

redhat Linux

IBM Resilient OnPrem<=IBM Security SOAR

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6464039

Event History

Jun 8, 2021

CVE Published

via IBM·12:00 AM

Jun 16, 2021

CVE Published

via MITRE·04:15 PM

Data Sourced

via MITRE·04:15 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6464039

Frequently Asked Questions

What is CVE-2021-20567?

CVE-2021-20567 is a vulnerability in IBM Resilient OnPrem that allows a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.

How severe is CVE-2021-20567?