Rewterz Threat Advisory –CVE-2021-20337 – IBM QRadar SIEM Vulnerability

Severity

Medium

Analysis Summary

CVE-2021-20337

IBM QRadar SIEM uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Impact

• Unauthorized Access

Affected Vendors

IBM

Affected Products

• IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8
• IBM QRadar SIEM 7.4.0 to 7.4.3 GA

Remediation

Refer to the appropriate IBM Security Bulletin for the patch, upgrade, or suggested workaround information.

https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-siem-uses-weaker-than-expected-cryptographic-algorithms-cve-2021-20337/