CVE-2021-38899: Medium severity IBM CP4D vulnerability

Q: What is the severity of CVE-2021-38899?

The severity of CVE-2021-38899 is medium with a CVSS score of 4.4.

Q: How does CVE-2021-38899 impact IBM Cloud Pak for Data?

CVE-2021-38899 allows a local user with special privileges to obtain highly sensitive information in IBM Cloud Pak for Data 2.5.

Q: What is the affected software for CVE-2021-38899?

The affected software for CVE-2021-38899 is IBM Cloud Pak for Data 2.5 and IBM CP4D 2.5.

Q: Is there a fix available for CVE-2021-38899?

Yes, IBM has provided a fix for CVE-2021-38899. Please refer to the IBM support page for more information.

Q: Where can I find more information about CVE-2021-38899?

You can find more information about CVE-2021-38899 on the IBM X-Force Exchange website or the IBM support page.

Published Sep 17, 2021

Updated

IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575.

Other sources

IBM Cloud Pak for Data could allow a local user with special privileges to obtain highly sensitive information.

— IBM

Affected Software

2 affected components

IBM CP4D<=2.5

IBM Cloud Pak for Data=2.5

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6490435

Event History

Sep 17, 2021

CVE Published

via IBM·12:00 AM

Sep 20, 2021

CVE Published

via MITRE·04:45 PM

Data Sourced

via MITRE·04:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

IBM-6490435

Frequently Asked Questions

What is the severity of CVE-2021-38899?

The severity of CVE-2021-38899 is medium with a CVSS score of 4.4.

How does CVE-2021-38899 impact IBM Cloud Pak for Data?