Information Disclosure Vulnerability in IBM Cloud Pak for Security (CP4S)

Information Disclosure Vulnerability in IBM Cloud Pak for Security (CP4S)

CVE-2021-20540 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923.

Learn more about our Cloud Audit.