CVE-2021-39013
4.3
CVSS:3.0/S:U/AV:N/A:N/UI:N/AC:L/PR:L/I:N/C:L/RC:C/RL:O/E:U
Summary
IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further attacks against the system. IBM X-Force ID: 213651.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Cloud Pak for Security | 1.7.0.0 | affected |
| IBM | Cloud Pak for Security | 1.7.1.0 | affected |
| IBM | Cloud Pak for Security | 1.7.2.0 | affected |
Weaknesses
- Obtain Information
ADP Enrichment
CVE Program Container
Additional References
- https://www.ibm.com/support/pages/node/6529200
- https://exchange.xforce.ibmcloud.com/vulnerabilities/213651
References
- https://www.ibm.com/support/pages/node/6529200
- https://exchange.xforce.ibmcloud.com/vulnerabilities/213651
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.