VDB
CVE-2021-20578
CVE-2021-20578
PUBLISHED
CVSS 5.400000095367432 MEDIUM
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.
EPSS 0.11% · 29.2th percentile
Risk Scores
CVSS v3.0
5.400000095367432
CVSS:3.0/C:L/AC:L/PR:N/A:N/I:L/AV:A/S:U/UI:N/RC:C/E:U/RL:O
EPSS Score
0.11%
29.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ibm | cloud_pak_for_security | 1.7.0.0, 1.7.1.0, 1.7.2.0 |
| IBM | Cloud Pak for Security | 1.7.0.0, 1.8.0.0, 1.7.1.0 |
Timeline
- Sep 30, 2021 CVE Published
- Oct 1, 2021 EPSS Score
- Oct 5, 2021 EPSS Score
- Oct 11, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Jan 23, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 21, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 8, 2022 EPSS Score
- Nov 4, 2022 EPSS Score