CVE-2021-39063

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/214956
• https://www.ibm.com/support/pages/node/6525346 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6525346

Frequently Asked Questions

• What is CVE-2021-39063?

  CVE-2021-39063 is a vulnerability in IBM Spectrum Protect Plus that allows an attacker to carry out privileged actions and retrieve sensitive information due to a misconfiguration in access control headers.

• How does IBM Spectrum Protect Plus use Cross-Origin Resource Sharing (CORS)?

  IBM Spectrum Protect Plus uses Cross-Origin Resource Sharing (CORS) to allow web applications to access its resources from a different domain.

• What is the severity of CVE-2021-39063?

  The severity of CVE-2021-39063 is critical with a severity value of 9.1.

• How can an attacker exploit the CVE-2021-39063 vulnerability?

  An attacker can exploit the CVE-2021-39063 vulnerability by leveraging the misconfiguration in access control headers to carry out privileged actions and retrieve sensitive information.

• How can I mitigate the CVE-2021-39063 vulnerability?

  To mitigate the CVE-2021-39063 vulnerability, ensure that access control headers in IBM Spectrum Protect Plus are properly configured to prevent unauthorized access.