QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-29859

Back to search

CVE-2021-29859

Published: May 2, 2022

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.0

3.5

LOW

Description

IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081.

VendorProductVersions

IBM

Cloud Pak for Business Automation

affected
18.0.0
affected
18.0.1
affected
18.0.2
affected
19.0.1
affected
19.0.2

+7 more versions

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/S:U/A:N/AV:P/PR:N/AC:L/C:L/I:L/UI:N/RC:C/E:U/RL:O

Scope

Unchanged

Availability

None

Attack Vector

Physical

Privileges Required

None

Attack Complexity

Low

Confidentiality

Low

Integrity

Low

User Interaction

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now