CVE-2021-20359: Medium severity ibm cloud pak for automation vulnerability
Published Feb 3, 2021
·Updated
Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user.
Affected Software
4 affected components
IBM Cloud Pak for Automation=20.0.2-interim_fix002
IBM Cloud Pak for Automation=20.0.3
IBM Cloud Pak for Automation<=20.0.3
IBM Cloud Pak for Automation<=20.0.2 IF002
Event History
Feb 3, 2021
CVE Published
via IBM·12:00 AM
Feb 8, 2021
CVE Published
via MITRE·02:40 PM
Data Sourced
via MITRE·02:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-20359?
CVE-2021-20359 is a vulnerability in IBM Cloud Pak for Automation that allows unauthorized users to obtain potentially sensitive information from log files.
2
How severe is CVE-2021-20359?
CVE-2021-20359 has a severity rating of 6.5 (medium).
3
Which versions of IBM Cloud Pak for Automation are affected by CVE-2021-20359?
IBM Cloud Pak for Automation versions 20.0.3 and 20.0.2-IF002 are affected by CVE-2021-20359.
4
How can an unauthorized user obtain sensitive information from log files in IBM Cloud Pak for Automation?
An unauthorized user can obtain sensitive information from log files in IBM Cloud Pak for Automation due to improper storage of potentially sensitive information.
5
Is there a fix for CVE-2021-20359?
Yes, IBM has provided a fix for CVE-2021-20359. It is recommended to upgrade to a fixed version of IBM Cloud Pak for Automation.