VulnerabilityModified

CVE-2021-29780

IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation.

MEDIUM 4.7EPSS 0.67%

Does this matter?

Lower severity and a low EPSS score (0.67%). Track it; it rarely justifies an emergency change on its own.

Description

IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.

CVSS 3.1: 4.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS: 0.67% probability · 50th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: ibm/resilient security orchestration automation and response
Source: psirt@us.ibm.com

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/203085VDB Entry
https://www.ibm.com/support/pages/node/6473131Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/203085VDB Entry
https://www.ibm.com/support/pages/node/6473131Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.