CVE-2021-29766: Medium severity ibm i2 analyze vulnerability
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202680.
Other sources
IBM i2 Analyst's Notebook Premium could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29766?
CVE-2021-29766 has a medium severity rating as it allows remote attackers to obtain sensitive information through detailed error messages.
How do I fix CVE-2021-29766?
To fix CVE-2021-29766, upgrade to a patched version of IBM i2 Analyze beyond 4.3.2.
What versions of IBM i2 Analyze are affected by CVE-2021-29766?
CVE-2021-29766 affects IBM i2 Analyze versions 4.3.0, 4.3.1, and 4.3.2.
What type of vulnerability is CVE-2021-29766?
CVE-2021-29766 is classified as an information disclosure vulnerability.
Can CVE-2021-29766 lead to further attacks?
Yes, the information disclosed in CVE-2021-29766 can be utilized in subsequent attacks against the system.