CVE-2021-39088

IBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be combined with other unknown vulnerabilities then privilege escalation could be performed. IBM X-Force ID: 216111.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ibmCNA
7.4 HIGH
LOCAL
HIGH
NONE
CVSS:3.0/I:H/A:H/PR:N/C:H/AC:H/S:U/AV:L/UI:N/E:U/RL:O/RC:C
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
VendorProductVersion
ibmqradar_security_information_and_event_manager
7.3.0 ≤
𝑥
< 7.3.3
ibmqradar_security_information_and_event_manager
7.4.0 ≤
𝑥
< 7.4.3
ibmqradar_security_information_and_event_manager
7.3.3
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_1
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_10
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_11
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_2
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_3
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_4
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_5
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_6
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_7
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_8
ibmqradar_security_information_and_event_manager
7.3.3:fix_pack_9
ibmqradar_security_information_and_event_manager
7.4.3
ibmqradar_security_information_and_event_manager
7.4.3:fix_pack_1
ibmqradar_security_information_and_event_manager
7.4.3:fix_pack_2
ibmqradar_security_information_and_event_manager
7.4.3:fix_pack_3
ibmqradar_security_information_and_event_manager
7.4.3:fix_pack_4
ibmqradar_security_information_and_event_manager
7.5.0
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_1
𝑥
= Vulnerable software versions