CVE-2021-29859

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 02-05-2022 07:15

Last modified: - 11-05-2022 02:56

Total changes: - 3

Description

IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Physical

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

6.8

Base score

0.9

5.9

Exploitability score

Impact score

Verification logic

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_007

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_004

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=-

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_002

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_003

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_006

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_005

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.1 AND update=interim_fix_001

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_009

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_007

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_004

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_008

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=-

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_002

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_003

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_006

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_005

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.2 AND update=interim_fix_001

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_003

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_006

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_005

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_001

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_007

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_004

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_008

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=-

vendor=ibm AND product=cloud_pak_for_business_automation AND version=21.0.3 AND update=interim_fix_002

Reference

https://www.ibm.com/support/pages/node/6578583
ibm-icp4a-cve202129859-info-disc (206081)-VDB Entry, Vendor Advisory

Keywords

CVE-2021-29859

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-29859

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures