4.9
CVE-2021-38971
- EPSS 0.19%
- Veröffentlicht 14.03.2022 17:15:07
- Zuletzt bearbeitet 21.11.2024 06:18:19
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Data Virtualization On Cloud Pak For Data Version >= 1.7.1 <= 1.7.3
Ibm ≫ Data Virtualization On Cloud Pak For Data Version1.3.0
Ibm ≫ Data Virtualization On Cloud Pak For Data Version1.4.1
Ibm ≫ Data Virtualization On Cloud Pak For Data Version1.5.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.379 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.9 | 1.2 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|
| psirt@us.ibm.com | 4.9 | 1.2 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
|