PT-2021-13897 · Ibm · Ibm Cloud Pak For Multicloud Management Monitoring

Published 2021-03-09 · Updated 2021-03-10 · CVE-2021-20341

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Multicloud Management Monitoring version 2.2

Description: The issue allows IBM Cloud Pak for Multicloud Management Monitoring to return potentially sensitive information in headers, which could lead to further attacks against the system.

Recommendations: For IBM Cloud Pak for Multicloud Management Monitoring version 2.2, consider restricting access to sensitive information in headers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-20341

Affected Products

Ibm Cloud Pak For Multicloud Management Monitoring

References · 6

• https://ibm.com/support/pages/node/6426997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20341 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/194513 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20341 · Vendor Advisory
• https://t.me/cvenotify/11131 · Telegram Post
• https://t.me/cibsecurity/24603 · Telegram Post