CyberSec.Space Logo
Back to CVE Browser

CVE-2021-29696

HIGH
7.2
CVSS Severity Score
EPSS Score0.1500%
EPSS Percentile19.31th
PublishedAug 2, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

Affected Platforms (CPE)

📦
Ibm

Cloud Pak For Security

= 1.5.0.0
📦
Ibm

Cloud Pak For Security

= 1.5.0.1
📦
Ibm

Cloud Pak For Security

= 1.6.0.0
📦
Ibm

Cloud Pak For Security

= 1.6.1.0
📦
Ibm

Cloud Pak For Security

= 1.7.0.0
📦
Ibm

Cloud Pak For Security

= 1.7.1.0

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/200597
🔗 https://www.ibm.com/support/pages/node/6476940
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/200597
🔗 https://www.ibm.com/support/pages/node/6476940

Related Vulnerabilities

CVE-2021-205789.8

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions d...

CVE-2021-205389.1

IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they s...

CVE-2020-46279.0

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary comman...

CVE-2021-298947.5

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that c...