IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001.
References
Link | Resource |
---|---|
https://www.ibm.com/support/pages/node/6453109 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/196001 | VDB Entry Vendor Advisory |
Configurations
Information
Published : 2021-05-14 10:15
Updated : 2021-05-20 11:19
NVD link : CVE-2021-20393
Mitre link : CVE-2021-20393
JSON object : View
CWE
CWE-209
Generation of Error Message Containing Sensitive Information
Products Affected
ibm
- qradar_user_behavior_analytics