CyberSec.Space Logo
Back to CVE Browser

CVE-2021-20578

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1510%
EPSS Percentile41.94th
PublishedSep 30, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.

Affected Platforms (CPE)

📦
Ibm

Cloud Pak For Security

= 1.7.0.0
📦
Ibm

Cloud Pak For Security

= 1.7.1.0
📦
Ibm

Cloud Pak For Security

= 1.7.2.0

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/199282
🔗 https://www.ibm.com/support/pages/node/6493729
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/199282
🔗 https://www.ibm.com/support/pages/node/6493729

Related Vulnerabilities

CVE-2021-205389.1

IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they s...

CVE-2020-46279.0

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary comman...

CVE-2021-298947.5

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that c...

CVE-2021-296967.2

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated atta...