CVE-2021-20431

CVSS 4.3 MEDIUMEPSS 0.9%

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.3EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 jul 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342.

CVSS:3.0/I:N/A:N/AV:N/UI:R/C:L/AC:L/PR:N/S:U/RL:O/E:U/RC:C

Productos afectados

IBM · i2 Analyst's Notebook Premium

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/196342 https://www.ibm.com/support/pages/node/6474865