CVE-2021-29912: XSS
IBM Cloud Pak - Risk Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Security Risk Manager on CP4S 1.7.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 207828.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29912?
CVE-2021-29912 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2021-29912?
To remediate CVE-2021-29912, ensure you update to a patched version of IBM Security Risk Manager beyond CP4S 1.7.0.0.
What software is affected by CVE-2021-29912?
CVE-2021-29912 affects IBM Security Risk Manager on CP4S version 1.7.0.0 and earlier.
What type of vulnerability is CVE-2021-29912?
CVE-2021-29912 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary JavaScript code.
What are the potential impacts of CVE-2021-29912?
CVE-2021-29912 could lead to credential disclosure and manipulation of the intended functionality within a trusted session.