PublicCVE

CVE-2021-20359

MEDIUM6.5JSON exportCreate alert

Description

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966.

CVSS breakdown

CVSS 3.0
User Interaction
None
Attack Complexity
Low
Confidentiality
High
Scope
Unchanged
Privileges Required
Low
Integrity
None
Availability
None
Attack Vector
Network
E
Unchanged
RL
O
RC
Changed

Affected products