CVE-2021-20540

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through…

Low · published August 2, 2021

CVSS v3.0
2.7
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923.

The record
Technical detail
CVSS v3.0
2.7 · LOW
Vector
CVSS:3.0/AC:L/AV:N/A:N/S:U/C:L/UI:N/PR:H/I:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00912 · 59.6th percentile
Published
2021-08-02T16:35Z
EPSS history
Timeline
  • 02 AUG 16:35Z
    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through…
    cvelistv5