CVE-2021-38878

Published: Apr 27, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.

Affected (17)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

17 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	From 7.3.0 to 7.3.3
Ibm Qradar Security Information And Event Manager	From 7.4.0 to 7.4.3
Ibm Qradar Security Information And Event Manager	Version 7.3.3
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_1
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_2
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_3
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_4
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_5
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_6
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_7
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_8
Ibm Qradar Security Information And Event Manager	Version 7.3.3 fix_pack_9
Ibm Qradar Security Information And Event Manager	Version 7.4.3
Ibm Qradar Security Information And Event Manager	Version 7.4.3 fix_pack_1
Ibm Qradar Security Information And Event Manager	Version 7.4.3 fix_pack_2
Ibm Qradar Security Information And Event Manager	Version 7.4.3 fix_pack_3
Ibm Qradar Security Information And Event Manager	Version 7.5.0

Running on/with	Platform Versions
Linux Linux Kernel	All versions

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/208756

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6574787

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/208756

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6574787

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.