CVE-2021-20359

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/194966 · VDB Entry
• ibm.com/support/pages/node/6412345 · Vendor Advisory

cloud pak for automation のその他の脆弱性

• CVE-2021-29872中 5.4IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by impr…
• CVE-2021-38966中 5.4IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod…
• CVE-2021-29775中 5.4IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scri…
• CVE-2021-20482高 7.1IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML dat…
• CVE-2021-20358中 6.5IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This i…