CVE-2021-29880: Medium severity ibm qradar security information and event manager vulnerability

Published Aug 12, 2021

Updated

IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM data to the incorrect domain. IBM X-Force ID: 206979.

Other sources

IBM QRadar SIEM when using domains or multi-tenancy could be vulnerable to information disclosure between tenants by routing SIEM data to the incorrect domain.

— IBM

Affected Software

2 affected components

IBM QRadar Security Information and Event Manager=7.4.3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6480957

Event History

Aug 12, 2021

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Aug 13, 2021

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6480957

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-29880.

What is the severity of CVE-2021-29880?

The severity of CVE-2021-29880 is medium with a CVSS score of 6.5.

Which IBM QRadar SIEM versions are affected by CVE-2021-29880?

IBM QRadar SIEM versions 7.4.3 and 7.4.3 Fix Pack 1 are affected by CVE-2021-29880.

How does CVE-2021-29880 affect IBM QRadar SIEM?

CVE-2021-29880 could allow information disclosure between tenants in IBM QRadar SIEM when using domains or multi-tenancy.

Is there a fix available for CVE-2021-29880?

Yes, IBM has released a fix for CVE-2021-29880. Please refer to IBM's support page for more information.