Vulnerability Description
IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.
CVSS Score
3.3
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Qradar User Behavior Analytics | >= 1.0.0, < 4.1.1 |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/195999VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6453103Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/195999VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6453103Vendor Advisory
FAQ
What is CVE-2021-20391?
CVE-2021-20391 is a vulnerability with a CVSS score of 3.3 (LOW). IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.
How severe is CVE-2021-20391?
CVE-2021-20391 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-20391?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Qradar User Behavior Analytics.