CVE-2021-38936: Medium severity IBM QRadar Security Information and Event Manager vulnerability
Published Jul 18, 2022
·Updated
IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893.
Other sources
IBM QRadar SIEM could disclose highly sensitive information to a privileged user.
— IBM
Affected Software
25 affected components
IBM QRadar Security Information and Event Manager>=7.3.0<7.3.3
IBM QRadar Security Information and Event Manager>=7.4.0<7.4.3
IBM QRadar Security Information and Event Manager=7.3.3
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_1
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_10
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_11
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_2
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_3
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_4
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_5
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_6
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_7
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_8
IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_9
IBM QRadar Security Information and Event Manager=7.4.3
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_2
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_3
IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_4
IBM QRadar Security Information and Event Manager=7.5.0
IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1
Linux Linux kernel
IBM QRadar SIEM<=7.3.0 - 7.3.3 Fix Pack 11
IBM QRadar SIEM<=7.4.0 - 7.4.3 Fix Pack 5
IBM QRadar SIEM<=7.5.0 - 7.5.0 Update Pack 1
Remediation
Patch Available
Event History
Jul 18, 2022
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionSeverityAffected Software
Jul 20, 2022
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this IBM QRadar SIEM vulnerability?
The vulnerability ID for this IBM QRadar SIEM vulnerability is CVE-2021-38936.
2
What can a privileged user potentially disclose due to this vulnerability?
A privileged user could potentially disclose highly sensitive information.
3
Which versions of IBM QRadar SIEM are affected by this vulnerability?
IBM QRadar SIEM versions 7.3, 7.4, and 7.5 are affected by this vulnerability.
4
What is the severity of CVE-2021-38936?
The severity of CVE-2021-38936 is medium with a CVSS score of 4.9.
5
How can I fix this vulnerability?
To fix this vulnerability, apply the relevant fixes or patches provided by IBM according to the affected product version.