CVE-2021-39089

Опубликовано: 20 янв. 2023

Источник: nvd

CVSS3: 4.3

CVSS3: 6.5

EPSS Низкий

Описание

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 216387.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/216387
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6856405
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/216387
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6856405
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*

Версия от 1.10.0.0 (включая) до 1.10.6.0 (включая)

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00221

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

GHSA-9qqj-2f7c-43ff

CVSS3: 6.5

github

около 3 лет назад

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 216387.

EPSS

Процентиль: 45%

0.00221

Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-200