medium4.9
CVE-2021-29697
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive info…
Impact
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obtain sensitive information through HTTP requests that could be used in further attacks against the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cloud Pak For Security | Versions 1.5.0.0, 1.5.0.1, 1.6.0.0, 1.6.1.0, 1.7.0.0, 1.7.1.0 |