PT-2022-9942
CVE-2021-29859
·
تاريخ النشر
2022-05-02
·
تاريخ التحديث
2022-05-11
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM ICP4A - User Management System Component versions V21.0.1 through V21.0.1-IF007
IBM ICP4A - User Management System Component versions V21.0.2 through V21.0.2-IF009
IBM ICP4A - User Management System Component versions V21.0.3 through V21.0.3-IF008
Description
The issue could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and revocation when another user logs out.
Recommendations
For versions V21.0.1 through V21.0.1-IF007, update to a version that includes the necessary security fixes.
For versions V21.0.2 through V21.0.2-IF009, update to a version that includes the necessary security fixes.
For versions V21.0.3 through V21.0.3-IF008, update to a version that includes the necessary security fixes.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾