CVE-2021-20431

CVSS 4.3 MEDIUMEPSS 0.9%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.3EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 jul 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342.

CVSS:3.0/I:N/A:N/AV:N/UI:R/C:L/AC:L/PR:N/S:U/RL:O/E:U/RC:C

Produtos afetados

IBM · i2 Analyst's Notebook Premium

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/196342 https://www.ibm.com/support/pages/node/6474865