CVE-2021-39088: High severity IBM QRadar Security Information and Event Manager vulnerability

Q: What is CVE-2021-39088?

CVE-2021-39088 is a vulnerability in IBM QRadar SIEM that allows for local privilege escalation if combined with other unknown vulnerabilities.

Q: Which versions of IBM QRadar SIEM are affected by CVE-2021-39088?

The affected versions of IBM QRadar SIEM are 7.3, 7.4, and 7.5.

Q: How severe is CVE-2021-39088?

CVE-2021-39088 has a severity rating of 7.8, which is classified as high.

Q: How can I fix CVE-2021-39088?

To fix CVE-2021-39088, you should update IBM QRadar SIEM to a version that is not affected by the vulnerability.

Q: Where can I find more information about CVE-2021-39088?

You can find more information about CVE-2021-39088 on the IBM X-Force Exchange website and the IBM support pages.

Published Jul 18, 2022

Updated

IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111.

Other sources

IBM QRadar SIEM is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed.

— IBM

Affected Software

25 affected components

IBM QRadar Security Information and Event Manager>=7.3.0<7.3.3

IBM QRadar Security Information and Event Manager>=7.4.0<7.4.3

IBM QRadar Security Information and Event Manager=7.3.3

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_1

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_10

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_11

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_2

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_3

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_4

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_5

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_6

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_7

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_8

IBM QRadar Security Information and Event Manager=7.3.3-fix_pack_9

IBM QRadar Security Information and Event Manager=7.4.3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_1

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_2

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_3

IBM QRadar Security Information and Event Manager=7.4.3-fix_pack_4

IBM QRadar Security Information and Event Manager=7.5.0

IBM QRadar Security Information and Event Manager=7.5.0-update_pack_1

Linux Linux kernel

IBM QRadar SIEM<=7.3.0 - 7.3.3 Fix Pack 11

IBM QRadar SIEM<=7.4.0 - 7.4.3 Fix Pack 5

IBM QRadar SIEM<=7.5.0 - 7.5.0 Update Pack 1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6607129

Event History

Jul 18, 2022

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionSeverityAffected Software

Jul 28, 2022

CVE Published

via MITRE·10:15 PM

Data Sourced

via MITRE·10:15 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6607129

Frequently Asked Questions

What is CVE-2021-39088?

CVE-2021-39088 is a vulnerability in IBM QRadar SIEM that allows for local privilege escalation if combined with other unknown vulnerabilities.

Which versions of IBM QRadar SIEM are affected by CVE-2021-39088?