CVE-2021-29859

Name of the Vulnerable Software and Affected Versions IBM ICP4A - User Management System Component versions V21.0.1 through V21.0.1-IF007 IBM ICP4A - User Management System Component versions V21.0.2 through V21.0.2-IF009 IBM ICP4A - User Management System Component versions V21.0.3 through V21.0.3-IF008

Description The issue could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and revocation when another user logs out.

Recommendations For versions V21.0.1 through V21.0.1-IF007, update to a version that includes the necessary security fixes. For versions V21.0.2 through V21.0.2-IF009, update to a version that includes the necessary security fixes. For versions V21.0.3 through V21.0.3-IF008, update to a version that includes the necessary security fixes.