PT-2021-13910
CVE-2021-20359
·
تاريخ النشر
2021-02-08
·
تاريخ التحديث
2021-02-10
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
IBM Cloud Pak for Automation versions 20.0.2-IF002 through 20.0.3
Description:
The issue concerns the storage of potentially sensitive information in log files by the Business Automation Application Designer Component, which could be accessed by an unauthorized user.
Recommendations:
For versions 20.0.2-IF002 through 20.0.3, consider restricting access to log files to minimize the risk of sensitive information disclosure until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾