CVE-2021-38901: Infoleak

Q: What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-38901.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'IBM Spectrum Protect Operations Center under special configurations could allow a local user to obtain highly sensitive information.'

Q: What is the severity of CVE-2021-38901?

The severity of CVE-2021-38901 is medium, with a severity value of 5.5.

Q: Which software is affected by this vulnerability?

IBM Spectrum Protect Operations Center versions 7.1.0.000-7.1.13.xxx and up to version 7.1.14 are affected by this vulnerability.

Q: How can a local user exploit this vulnerability?

Under special configurations, a local user can exploit this vulnerability to obtain highly sensitive information.

Published Dec 10, 2021

Updated

IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. IBM X-Force ID: 209610.

Other sources

IBM Spectrum Protect Operations Center, under special configurations, could allow a local user to obtain highly sensitive information.

— IBM

Affected Software

2 affected components

IBM Spectrum Protect Operations Center>=7.1.0.000<7.1.14

IBM Spectrum Protect Operations Center<=7.1.0.000-7.1.13.xxx

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6524924

Event History

Dec 10, 2021

CVE Published

via IBM·12:00 AM

Dec 13, 2021

CVE Published

via MITRE·06:35 PM

Data Sourced

via MITRE·06:35 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6524924

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2021-38901.

What is the title of this vulnerability?