CVE-2021-20424

Published: Jul 13, 2021Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309.

Affected (1)

Products: Ibm: Cloud Pak For Applications

1 product

Cloud Pak For Applications

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Pak For Applications	Before 4.3.1

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/196309

Source: psirt@us.ibm.com

VDB Entry

https://www.ibm.com/support/pages/node/6471325

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/196309

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

https://www.ibm.com/support/pages/node/6471325

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.