CVE-2021-38971

CVSS 4.9 MEDIUMEPSS 0.9%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.9EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Mar 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.

CVSS:3.0/S:U/I:N/UI:N/AC:L/PR:H/C:H/AV:N/A:N/RC:C/RL:O/E:U

Affected products

IBM · Data Virtualization on Cloud Pak for Data

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/212620 https://www.ibm.com/support/pages/node/6551076