VulnerabilityModified
CVE-2021-20341
IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system.
MEDIUM 5.3EPSS 1.03%
Does this matter?
Lower severity and a low EPSS score (1.03%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 1.03% probability · 62th percentile
- CISA KEV
- Not listed
- Affected
- ibm/cloud pak for multicloud management monitoring
- Source
- psirt@us.ibm.com
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/194513VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6426997Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/194513VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6426997Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.