mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
105 lines
3.5 KiB
JSON
105 lines
3.5 KiB
JSON
{
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Cloud Pak for Security",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "1.6.0.0"
|
|
},
|
|
{
|
|
"version_value": "1.5.0.1"
|
|
},
|
|
{
|
|
"version_value": "1.5.0.0"
|
|
},
|
|
{
|
|
"version_value": "1.6.0.1"
|
|
},
|
|
{
|
|
"version_value": "1.7.0.0"
|
|
},
|
|
{
|
|
"version_value": "1.7.1.0"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "IBM"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"impact": {
|
|
"cvssv3": {
|
|
"TM": {
|
|
"RL": "O",
|
|
"RC": "C",
|
|
"E": "U"
|
|
},
|
|
"BM": {
|
|
"A": "N",
|
|
"AV": "N",
|
|
"SCORE": "3.700",
|
|
"AC": "H",
|
|
"I": "N",
|
|
"PR": "N",
|
|
"C": "L",
|
|
"UI": "N",
|
|
"S": "U"
|
|
}
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"refsource": "CONFIRM",
|
|
"name": "https://www.ibm.com/support/pages/node/6476940",
|
|
"url": "https://www.ibm.com/support/pages/node/6476940",
|
|
"title": "IBM Security Bulletin 6476940 (Cloud Pak for Security)"
|
|
},
|
|
{
|
|
"name": "ibm-cp4s-cve202120541-info-disc (198927)",
|
|
"refsource": "XF",
|
|
"title": "X-Force Vulnerability Report",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/198927"
|
|
}
|
|
]
|
|
},
|
|
"data_format": "MITRE",
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"value": "Obtain Information",
|
|
"lang": "eng"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"data_version": "4.0",
|
|
"CVE_data_meta": {
|
|
"STATE": "PUBLIC",
|
|
"DATE_PUBLIC": "2021-07-30T00:00:00",
|
|
"ID": "CVE-2021-20541",
|
|
"ASSIGNER": "psirt@us.ibm.com"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"value": "IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927.",
|
|
"lang": "eng"
|
|
}
|
|
]
|
|
},
|
|
"data_type": "CVE"
|
|
} |