PT-2021-18527

CVE-2021-29868

Published

2021-10-27

Updated

2021-11-02

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM i2 iBase versions 8.9.13 through 9.0.0

Description The issue allows a local attacker to obtain sensitive information due to insufficient session expiration.

Recommendations For versions 8.9.13 and 9.0.0, consider implementing additional session management controls to mitigate the risk of sensitive information disclosure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vendors

Affected products