CVE-2021-20565
First published: Wed Apr 28 2021(Updated: )
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | =1.4.0.0 | |
| IBM Cloud Pak for Security | =1.5.0.0 | |
| IBM Cloud Pak for Security | =1.5.0.1 | |
| IBM Cloud Pak for Security | =1.6.0.0 | |
| IBM Cloud Pak for Security | =1.6.0.1 | |
| <=1.6.0.1 | ||
| <=1.6.0.0 | ||
| <=1.5.0.1 | ||
| <=1.5.0.0 | ||
| <=1.4.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-20565.
What is the severity of CVE-2021-20565?
The severity of CVE-2021-20565 is medium (5.3).
Which versions of IBM Cloud Pak for Security (CP4S) are affected by this vulnerability?
Versions 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 of IBM Cloud Pak for Security (CP4S) are affected by this vulnerability.
What is the protection mechanism used by IBM Cloud Pak for Security (CP4S) that is vulnerable?
IBM Cloud Pak for Security (CP4S) uses a protection mechanism that relies on the existence or values of an input.
Are there any references available for this vulnerability?
Yes, you can find more information about this vulnerability at the following references: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/199236), [Reference 2](https://www.ibm.com/support/pages/node/6453115)
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/tags
- agent/softwarecombine
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.4.0.0
- version/ibm cloud pak for security/1.5.0.0
- version/ibm cloud pak for security/1.5.0.1
- version/ibm cloud pak for security/1.6.0.0
- version/ibm cloud pak for security/1.6.0.1
- canonical/ibm cloud pak for security (cp4s)
- version/ibm cloud pak for security (cp4s)/1.6.0.1
- version/ibm cloud pak for security (cp4s)/1.6.0.0
- version/ibm cloud pak for security (cp4s)/1.5.0.1
- version/ibm cloud pak for security (cp4s)/1.5.0.0
- version/ibm cloud pak for security (cp4s)/1.4.0.0