Privilege Escalation in IBM Event Streams by User-Supplied Certificates

CVE-2021-29792

What is CVE-2021-29792?

IBM Event Streams versions 10.0 through 10.3 are susceptible to a privilege escalation vulnerability that enables a malicious user to generate their own certificates using the CA private key. This exploitation could allow unauthorized users to gain elevated privileges within the cluster environment, posing a significant security risk. For further insights, refer to the IBM support page and X-Force ID 203450.

References