CVE-2021-39006: Medium severity ibm qradar wincollect vulnerability

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-39006.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'IBM QRadar WinCollect Agent could allow an attacker to obtain sensitive information due to missing best practices'.

Q: Which IBM product is affected by this vulnerability?

IBM QRadar WinCollect Agent is affected by this vulnerability.

Q: What is the severity rating of this vulnerability?

The severity rating of this vulnerability is medium, with a CVSS score of 5.3.

Q: How can I fix this vulnerability?

To fix this vulnerability, it is recommended to follow the best practices provided by IBM in their support document and update to the latest version of IBM QRadar WinCollect Agent.

Published Jun 16, 2022

Updated

IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. IBM X-Force ID: 213549.

Other sources

IBM QRadar WinCollect Agent could allow an attacker to obtain sensitive information due to missing best practices.

— IBM

Affected Software

4 affected components

IBM QRadar WinCollect Agent<=10.0 - 10.0.1

IBM QRadar Wincollect=10.0

IBM QRadar Wincollect=10.0.1

Linux Linux kernel

Event History

Jun 16, 2022

CVE Published

via IBM·12:00 AM

Jun 21, 2022

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6596947

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-39006.

What is the title of this vulnerability?

The title of this vulnerability is 'IBM QRadar WinCollect Agent could allow an attacker to obtain sensitive information due to missing best practices'.

Which IBM product is affected by this vulnerability?