CVE-2021-29776
Medium
Published: 27 April 2022
Published
27 April 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.0031
54.7th percentile
Risk Priority
9
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-29776 is a medium-severity an unspecified weakness vulnerability in Ibm Qradar Security Information And Event Manager. Its CVSS base score is 4.3 (Medium).
Operationally, ranked in the top 45.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-16250
Vulnerability details
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
ibm
qradar security information and event manager
7.3.3, 7.4.3, 7.5.0 · 7.3.0 — 7.3.3 · 7.4.0 — 7.4.3
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.