CVE-2021-29906

IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose sensitive information to a local user when it is configured to…

Medium · published October 8, 2021

CVSS v3.0
5.1
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose sensitive information to a local user when it is configured to use an IBM Cloud API key to connect to cloud-based connectors. IBM X-Force ID: 207630.

The record
Technical detail
CVSS v3.0
5.1 · MEDIUM
Vector
CVSS:3.0/I:N/S:U/A:N/C:H/AV:L/PR:N/UI:N/AC:H/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Published
2021-10-08T17:20Z
EPSS history
Timeline
  • 08 OCT 17:20Z
    IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose sensitive information to a local user when it is configured to…
    cvelistv5