Vulnerability · Published May 14, 2021 · Assigned by ibm
CVE-2021-20565
Medium 4.6
In plain English
A medium-severity security flaw in Cloud Pak for Security from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.0)4.6Medium
Exploit odds (30 days)0.8%top 42.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Cloud Pak for Security | 1.4.0.01.6.0.01.5.0.11.5.0.01.6.0.1 |
References
- https://www.ibm.com/support/pages/node/6453115 x_refsource_CONFIRM
- ibm-cp4s-cve202120565-improper-input (199236) vdb-entry, x_refsource_XF