CVE-2021-29770: Input Validation
Published Jul 21, 2021
·Updated
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
Other sources
IBM i2 Analyst's Notebook Premium could allow an authenticated user to perform unauthorized actions due to hazardous input validation.
Affected Software
8 affected components
IBM i2 Analyze<=IBM i2 Analyze 4.3.1
IBM i2 Analyze<=IBM i2 Analyze 4.3.0
IBM i2 Analyze<=IBM i2 Analyze 4.3.2
IBM i2 Analyze=4.3.0
IBM i2 Analyze=4.3.1
IBM i2 Analyze=4.3.2
Linux Linux kernel
Microsoft Windows
Remediation
Patch Available
Event History
Jul 21, 2021
CVE Published
via IBM·12:00 AM
Jul 26, 2021
CVE Published
via MITRE·12:10 PM
Data Sourced
via MITRE·12:10 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-29770.
2
What is the severity of CVE-2021-29770?
The severity of CVE-2021-29770 is medium with a severity value of 6.5.
3
What is the affected software?
The affected software is IBM i2 Analyze versions 4.3.0, 4.3.1, and 4.3.2.
4
How can an authenticated user exploit this vulnerability?
An authenticated user can exploit this vulnerability to perform unauthorized actions due to hazardous input validation.
5
Are Linux and Windows operating systems affected by this vulnerability?
No, Linux and Windows operating systems are not affected by this vulnerability.