CVE-2021-38971

Опубликовано: 14 мар. 2022

Источник: nvd

CVSS3: 4.9

CVSS2: 4

EPSS Низкий

Описание

IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/212620
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6551076
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/212620
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6551076
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:data_virtualization_on_cloud_pak_for_data:*:*:*:*:*:*:*:*

Версия от 1.7.1 (включая) до 1.7.3 (включая)

cpe:2.3:a:ibm:data_virtualization_on_cloud_pak_for_data:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:data_virtualization_on_cloud_pak_for_data:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:data_virtualization_on_cloud_pak_for_data:1.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00189

Низкий

4.9 Medium

CVSS3

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-j4x5-q399-5w69

CVSS3: 4.9

github

почти 4 года назад

IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.

EPSS

Процентиль: 41%

0.00189

Низкий

4.9 Medium

CVSS3

4.9 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo