IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy. IBM X-Force ID: 196334.
References
Link | Resource |
---|---|
https://www.ibm.com/support/pages/node/6453107 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/196334 | VDB Entry Vendor Advisory |
Configurations
Information
Published : 2021-05-14 10:15
Updated : 2022-07-12 10:42
NVD link : CVE-2021-20429
Mitre link : CVE-2021-20429
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
ibm
- qradar_user_behavior_analytics