CVE-2021-29779

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host communications using man in the middle techniques. IBM X-Force ID: 203033.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
IBM	QRadar SIEM	7.3; 7.4

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/203033VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6520484Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/203033VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6520484Patch, Vendor Advisory

Timeline

Published: Dec 1, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-297804.7IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due CVE-2021-297819.8IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserializatio CVE-2021-297844.3IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message CVE-2021-297855.9IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP St CVE-2021-297866.5IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.CVE-2021-297885.4IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows u CVE-2021-297905.4IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows u CVE-2021-297927.2IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the c CVE-2021-297947.5IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic a CVE-2021-297956.0IBM PowerVM Hypervisor FW860, FW930, FW940, and FW950 could allow a local user to create a specially crafted sequence of hypervisor calls fr CVE-2021-297989.8IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially CVE-2021-297996.5IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information