CVE-2021-20359medium

CVE-2021-20359: medium-severity vulnerability in IBM Cloud Pak for Automation

Published · Updated

Follow this CVE+ Monitor Cloud Pak for Automation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.3%
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966.
CVSS:3.0/UI:N/AC:L/C:H/S:U/PR:L/I:N/A:N/AV:N/E:U/RL:O/RC:C
Affected products
IBM · Cloud Pak for Automation
Related CVEs — IBM Cloud Pak for Automation

In the same product, most dangerous first.

CVE-2021-20482HIGHCVE-2021-20482EPSS 1.4%CVE-2021-38900MEDIUMCVE-2021-38900EPSS 1.2%CVE-2021-29775MEDIUMCVE-2021-29775EPSS 0.9%CVE-2021-29751LOWCVE-2021-29751EPSS 0.9%CVE-2021-20358MEDIUMCVE-2021-20358EPSS 0.8%CVE-2021-29872MEDIUMCVE-2021-29872EPSS 0.8%