CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-29894

HIGH
7.5
CVSS Severity Score
EPSS Score0.1600%
EPSS Percentile28.88th
Published2021年9月30日
Last Modified2024年11月21日

Vulnerability Description

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320.

Affected Platforms (CPE)

📦
Ibm

Cloud Pak For Security

= 1.7.0.0
📦
Ibm

Cloud Pak For Security

= 1.7.1.0
📦
Ibm

Cloud Pak For Security

= 1.7.2.0

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/207320
🔗 https://www.ibm.com/support/pages/node/6493729
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/207320
🔗 https://www.ibm.com/support/pages/node/6493729

関連する脆弱性情報

CVE-2021-205789.8

IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions d...

CVE-2021-205389.1

IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they s...

CVE-2020-46279.0

IBM Cloud Pak for Security 1.3.0.1(CP4S) potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary comman...

CVE-2021-296967.2

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated atta...