CVE-2021-29767: Medium severity ibm i2 analyst's notebook premium vulnerability
IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681.
Other sources
IBM i2 Analyst's Notebook Premium could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29767?
The severity of CVE-2021-29767 is classified as medium.
How do I fix CVE-2021-29767?
To fix CVE-2021-29767, update IBM i2 Analyst's Notebook Premium to the latest version available from IBM.
Which versions of IBM i2 Analyst's Notebook Premium are affected by CVE-2021-29767?
CVE-2021-29767 affects IBM i2 Analyst's Notebook Premium versions 9.2.0, 9.2.1, and 9.2.2.
What type of vulnerability is CVE-2021-29767?
CVE-2021-29767 is classified as an information disclosure vulnerability.
Can CVE-2021-29767 be exploited remotely?
Yes, CVE-2021-29767 can be exploited remotely by an attacker obtaining sensitive information from detailed error messages.