Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2021-38919
CVE-2021-38919:
IBM QRadar SIEM vulnerability analysis and mitigation
Overview
IBM QRadar SIEM versions 7.3, 7.4, and 7.5 contain a security vulnerability (CVE-2021-38919) that may reveal authorized service tokens to other QRadar users in certain scenarios. The vulnerability was disclosed and patched in April 2022 (IBM Security).
Technical details
The vulnerability has a CVSS Base score of 5.9 with a vector of (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating a network-accessible vulnerability with high complexity, no privileges required, and no user interaction needed. The vulnerability primarily impacts confidentiality with no effect on integrity or availability (IBM Security).
Impact
The vulnerability could allow unauthorized access to service tokens by other QRadar users, potentially leading to unauthorized access to system resources or sensitive information. The exposure of service tokens could compromise the security of the affected systems (IBM Security).
Mitigation and workarounds
IBM has released fixes for the affected versions: QRadar/QRM/QVM/QRIF/QNI 7.5.0 UP1 for version 7.5.0, QRadar/QRM/QVM/QRIF/QNI 7.4.3 FP5 for version 7.4.3, and QRadar/QRM/QVM/QRIF/QNI 7.3.3 FP11 for version 7.3.3. Users are recommended to update their systems promptly (IBM Security).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management