CVE-2021-29802

IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
ibmCNA
5.6 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/A:L/C:L/AC:H/I:L/UI:N/PR:N/AV:N/S:U/RL:O/RC:C/E:U
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
VendorProductVersion
ibmresilient_security_orchestration_automation_and_response
𝑥
< 1.6.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/204059
https://www.ibm.com/support/pages/node/6482689
https://exchange.xforce.ibmcloud.com/vulnerabilities/204059
https://www.ibm.com/support/pages/node/6482689