First published: Wed Aug 18 2021(Updated: )
IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Resilient Security Orchestration Automation And Response | <1.6.1 | |
<=IBM Security SOAR |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-29802 is a vulnerability in IBM Security SOAR that allows operations to be performed at a higher privilege level than required, creating new weaknesses or amplifying the consequences of other weaknesses.
CVE-2021-29802 has a severity level of high, with a CVSS score of 7.5.
CVE-2021-29802 affects IBM Resilient Security Orchestration Automation and Response (SOAR) version 1.6.1 and IBM Resilient OnPrem.
CVE-2021-29802 can be exploited by performing operations at a privilege level higher than required in IBM Security SOAR.
Yes, you can find more information about CVE-2021-29802 at the following references: [link1](https://exchange.xforce.ibmcloud.com/vulnerabilities/204059), [link2](https://www.ibm.com/support/pages/node/6482689).