PT-2022-9942 · Ibm · Ibm Icp4A

Published 2022-05-02 · Updated 2022-05-11 · CVE-2021-29859

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM ICP4A - User Management System Component versions V21.0.1 through V21.0.1-IF007 IBM ICP4A - User Management System Component versions V21.0.2 through V21.0.2-IF009 IBM ICP4A - User Management System Component versions V21.0.3 through V21.0.3-IF008

Description The issue could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and revocation when another user logs out.

Recommendations For versions V21.0.1 through V21.0.1-IF007, update to a version that includes the necessary security fixes. For versions V21.0.2 through V21.0.2-IF009, update to a version that includes the necessary security fixes. For versions V21.0.3 through V21.0.3-IF008, update to a version that includes the necessary security fixes.

Fix

Related Identifiers

CVE-2021-29859

Affected Products

Ibm Icp4A

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-29859 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29859 · Vendor Advisory
• https://ibm.com/support/pages/node/6578583 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/206081 · Vendor Advisory
• https://t.me/cvenotify/30006 · Telegram Post
• https://t.me/cibsecurity/41736 · Telegram Post