Skip to content
Sign in
4.7 Medium

CVE-2021-29792 IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates…

Description

IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: 203450.

Affected products and versions

Product Affected versions Fixed in
Event Streams 10.3 No fix stated
Event Streams 10.2 No fix stated
Event Streams 10.1 No fix stated
Event Streams 10.0 No fix stated

Other CVEs of Event Streams

The 3 CVEs of Event Streams →
CVE-2020-4662 IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication… 6.5 Medium CVE-2018-1833 IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header 5.3 Medium
Track this CVE