CVE-2021-39011: IBM Cloud Pak for Security information disclosure
First published: Wed Jan 18 2023(Updated: )
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.6.0 stores potentially sensitive information in log files that could be read by a privileged user. IBM X-Force ID: 213645.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | >=1.10.0.0<=1.10.6.0 | |
| Linux Linux kernel | ||
| <=1.10.0.0 - 1.10.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM Cloud Pak for Security (CP4S) vulnerability?
The vulnerability ID for this IBM Cloud Pak for Security (CP4S) vulnerability is CVE-2021-39011.
What is the severity rating of CVE-2021-39011?
CVE-2021-39011 has a severity rating of 4.9 (medium).
How does CVE-2021-39011 impact IBM Cloud Pak for Security (CP4S)?
CVE-2021-39011 allows a privileged user to potentially access sensitive information stored in log files in IBM Cloud Pak for Security (CP4S).
How can I fix CVE-2021-39011 in IBM Cloud Pak for Security (CP4S)?
To fix CVE-2021-39011 in IBM Cloud Pak for Security (CP4S), apply the necessary security patches or updates provided by IBM.
Where can I find more information about CVE-2021-39011?
You can find more information about CVE-2021-39011 on the IBM X-Force ID: 213645 page or the IBM support page.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/title
- agent/remedy
- agent/softwarecombine
- agent/description
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.10.0.0
- version/ibm cloud pak for security/1.10.6.0
- vendor/linux
- canonical/linux linux kernel
- canonical/ibm cloud pak for security (cp4s)
- version/ibm cloud pak for security (cp4s)/1.10.0.0 - 1.10.6.0