CVE-2021-29696

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-29696
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/200597 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6476940 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.7.1.0:*:*:*:*:*:*:*
History

10 Aug 2021, 19:20

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : 9.0
v3 : 7.2
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/200597 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/200597 - VDB Entry, Vendor Advisory
References (CONFIRM) https://www.ibm.com/support/pages/node/6476940 - (CONFIRM) https://www.ibm.com/support/pages/node/6476940 - Vendor Advisory
CPE cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:cloud_pak_for_security:1.5.0.0:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

02 Aug 2021, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2021-08-02 17:15

Updated : 2023-12-10 13:55

NVD link : CVE-2021-29696

Mitre link : CVE-2021-29696

CVE.ORG link : CVE-2021-29696

JSON object : View

Products Affected

ibm

  • cloud_pak_for_security
CWE
NVD-CWE-noinfo