{"vulnerability": "CVE-2021-2040", "sightings": [{"uuid": "655777c8-18fa-44b8-964a-8a0f7b9432f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20400", "type": "seen", "source": "https://t.me/cibsecurity/33221", "content": "\u203c CVE-2021-20400 \u203c\n\nIBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-01T20:35:37.000000Z"}, {"uuid": "668b4f1c-c2a9-4737-8a4c-6853f50c4ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20407", "type": "seen", "source": "https://t.me/cibsecurity/23558", "content": "\u203c CVE-2021-20407 (security_verify_information_queue) \u203c\n\nIBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 198185.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-12T20:43:55.000000Z"}, {"uuid": "7866d369-afdd-4b8f-b137-55a97d54279c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20408", "type": "seen", "source": "https://t.me/cibsecurity/23557", "content": "\u203c CVE-2021-20408 (security_verify_information_queue) \u203c\n\nIBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext cryptographic key. IBM X-Force ID: 198187.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-12T20:43:54.000000Z"}, {"uuid": "99336290-c442-484e-a96c-bd23e1f9c33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20409", "type": "seen", "source": "https://t.me/cibsecurity/23554", "content": "\u203c CVE-2021-20409 (security_verify_information_queue) \u203c\n\nIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 198188.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-12T20:43:51.000000Z"}, {"uuid": "4eac7aa9-3158-4ff1-b9af-ec46b053bda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20406", "type": "seen", "source": "https://t.me/cibsecurity/23551", "content": "\u203c CVE-2021-20406 (security_verify_information_queue) \u203c\n\nIBM Security Verify Information Queue 1.0.6 and 1.0.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 198184.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-12T20:43:48.000000Z"}, {"uuid": "54542d98-e1aa-459c-b2c8-848ab1e16714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20405", "type": "seen", "source": "https://t.me/cibsecurity/23463", "content": "\u203c CVE-2021-20405 \u203c\n\nIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of output. IBM X-Force ID: 196183.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T20:42:58.000000Z"}, {"uuid": "637e4d15-4ebd-4bbc-ad5b-de238403c60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-20404", "type": "seen", "source": "https://t.me/cibsecurity/23460", "content": "\u203c CVE-2021-20404 \u203c\n\nIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-11T20:42:55.000000Z"}]}