CVE-2021-20539
CVE-2021-20539
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.3EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Aug 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198920.
CVSS:3.0/AC:L/AV:N/A:N/S:U/UI:N/C:L/I:N/PR:N/RL:O/RC:C/E:U
Affected products
IBM · Cloud Pak for SecurityWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →