Code injection

2023-06-2720:15:00

PRIOn knowledge base

www.prio-n.com

ibm

cloud pak

security

code injection

vulnerability

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.0%

JSON

IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant’s account. IBM X-Force ID: 254136.

CPENameOperatorVersion
cloud_pak_for_securityge1.9.0.0
cloud_pak_for_securityle1.9.2.0

CPE	Name	Operator	Version
	cloud_pak_for_security	ge	1.9.0.0
	cloud_pak_for_security	le	1.9.2.0

References

exchange.xforce.ibmcloud.com/vulnerabilities/254136

www.ibm.com/support/pages/node/6995221