CVE-2021-20358medium

CVE-2021-20358: medium-severity vulnerability in IBM Cloud Pak for Automation

Published · Updated

Follow this CVE+ Monitor Cloud Pak for Automation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.8%
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.
CVSS:3.0/PR:L/I:N/AV:N/A:N/AC:L/UI:N/C:H/S:U/E:U/RL:O/RC:C
Affected products
IBM · Cloud Pak for Automation
Related CVEs — IBM Cloud Pak for Automation

In the same product, most dangerous first.

CVE-2021-20482HIGHCVE-2021-20482EPSS 1.4%CVE-2021-20359MEDIUMCVE-2021-20359EPSS 1.3%CVE-2021-38900MEDIUMCVE-2021-38900EPSS 1.2%CVE-2021-29775MEDIUMCVE-2021-29775EPSS 0.9%CVE-2021-29751LOWCVE-2021-29751EPSS 0.9%CVE-2021-29872MEDIUMCVE-2021-29872EPSS 0.8%