CVE-2021-20358

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files

Medium · published February 8, 2021

CVSS v3.0
6.5
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/PR:L/I:N/AV:N/A:N/AC:L/UI:N/C:H/S:U/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.6th percentile
Published
2021-02-08T14:40Z
EPSS history
Timeline
  • 08 FEB 14:40Z
    IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files
    cvelistv5