CVE-2021-29750: High severity IBM QRadar Security Information and Event Manager vulnerability

Published Sep 14, 2021

Updated

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.

Other sources

IBM QRadar uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected Software

3 affected components

IBM QRadar Security Information and Event Manager=7.3.0

IBM QRadar Security Information and Event Manager=7.4.0

Linux Linux kernel

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6488945

Event History

Sep 14, 2021

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Sep 15, 2021

CVE Published

via MITRE·05:55 PM

Data Sourced

via MITRE·05:55 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6488945

Frequently Asked Questions

What is CVE-2021-29750?

CVE-2021-29750 is a vulnerability in IBM QRadar SIEM 7.3 and 7.4 that allows an attacker to decrypt highly sensitive information due to the use of weaker than expected cryptographic algorithms.

How does CVE-2021-29750 affect IBM QRadar SIEM?

CVE-2021-29750 affects IBM QRadar SIEM 7.3 and 7.4, allowing an attacker to decrypt highly sensitive information.

What is the severity of CVE-2021-29750?

CVE-2021-29750 has a severity value of 7.5 (high).

Is Linux Linux kernel affected by CVE-2021-29750?

No, Linux Linux kernel is not affected by CVE-2021-29750.

How can I fix CVE-2021-29750 in IBM QRadar SIEM?

To fix CVE-2021-29750 in IBM QRadar SIEM, apply the necessary security updates provided by IBM.