CVE-2021-29802 Privilege escalation in Security
IBM Security SOAR runs operations with excessive privileges, allowing attackers to escalate privileges or amplify other vulnerabilities.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-29802?
CVE-2021-29802 is a medium-severity vulnerability in IBM Security, published on 23 Aug 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Weakness: CWE-269
Which versions are affected by CVE-2021-29802?
It affects 1 product.
Products include Ibm Resilient Security Orchestration Automation and Response.
How do I fix CVE-2021-29802?
No fix has been published for CVE-2021-29802 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-29802 being exploited?
There is no known exploitation of CVE-2021-29802 in the wild and no public exploit code.
Other vulnerabilities in IBM Security
Sources
Also known as GHSA-wvfq-5xp8-rhv7.