CVE-2021-20565: Medium severity IBM Cloud Pak for Security vulnerability
IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236.
Other sources
IBM Cloud Pak for Security (CP4S) uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-20565.
What is the severity of CVE-2021-20565?
The severity of CVE-2021-20565 is medium (5.3).
Which versions of IBM Cloud Pak for Security (CP4S) are affected by this vulnerability?
Versions 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 of IBM Cloud Pak for Security (CP4S) are affected by this vulnerability.
What is the protection mechanism used by IBM Cloud Pak for Security (CP4S) that is vulnerable?
IBM Cloud Pak for Security (CP4S) uses a protection mechanism that relies on the existence or values of an input.
Are there any references available for this vulnerability?
Yes, you can find more information about this vulnerability at the following references: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/199236), [Reference 2](https://www.ibm.com/support/pages/node/6453115)