PT-2021-13910
CVE-2021-20359
·
Published
2021-02-08
·
Updated
2021-02-10
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
IBM Cloud Pak for Automation versions 20.0.2-IF002 through 20.0.3
Description:
The issue concerns the storage of potentially sensitive information in log files by the Business Automation Application Designer Component, which could be accessed by an unauthorized user.
Recommendations:
For versions 20.0.2-IF002 through 20.0.3, consider restricting access to log files to minimize the risk of sensitive information disclosure until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾