Cloud Pak For Security@1.7.1.0 Security Vulnerabilities and Issues — Cloud Pak For Security@1.7.1.0 CVE List

Lucene search

IbmCloud Pak For Security1.7.1.0

8 matches found

CVE•added 2021/12/22 5:15 p.m.•49 views

CVE-2021-39013

IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further attacks against the system. IBM X-Force ID: 213651.

6.5CVSS6AI score0.00162EPSS

CVE•added 2021/08/02 5:15 p.m.•41 views

CVE-2021-29696

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

9CVSS7.3AI score0.00362EPSS

CVE•added 2021/08/02 5:15 p.m.•39 views

CVE-2021-20540

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923.

5.3CVSS5.2AI score0.00194EPSS

CVE•added 2021/08/02 5:15 p.m.•38 views

CVE-2021-20539

5.3CVSS5.2AI score0.00169EPSS

CVE•added 2021/09/30 5:15 p.m.•38 views

CVE-2021-20578

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.

9.8CVSS9.1AI score0.00197EPSS

CVE•added 2021/09/30 5:15 p.m.•36 views

CVE-2021-29894

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320.

7.5CVSS7.4AI score0.00134EPSS

CVE•added 2021/08/02 5:15 p.m.•35 views

CVE-2021-20541

5.3CVSS5.2AI score0.00169EPSS

CVE•added 2021/08/02 5:15 p.m.•35 views

CVE-2021-29697

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP requests that could be used in further attacks against the system.

4.9CVSS5AI score0.00154EPSS