CVE-2021-38966

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/212357 · VDB Entry
• ibm.com/support/pages/node/6526488 · Vendor Advisory

cloud pak for automation のその他の脆弱性

• CVE-2021-29872中 5.4IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by impr…
• CVE-2021-29775中 5.4IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scri…
• CVE-2021-20482高 7.1IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML dat…
• CVE-2021-20359中 6.5IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive informat…
• CVE-2021-20358中 6.5IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This i…