CVE-2021-38887

CVSS 4.3 MEDIUMEPSS 0.8%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.3EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 Nov 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401.

CVSS:3.0/AC:L/I:N/AV:N/S:U/PR:L/UI:N/A:N/C:L/RL:O/E:U/RC:C

Affected products

IBM · InfoSphere Information Server

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/209401 https://www.ibm.com/support/pages/node/6510178