CVE-2021-20578
CVE-2021-20578
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.4EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
30 Sep 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.
CVSS:3.0/C:L/AC:L/PR:N/A:N/I:L/AV:A/S:U/UI:N/RC:C/E:U/RL:O
Affected products
IBM · Cloud Pak for SecurityWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →