VDB
CVE-2021-29894
CVE-2021-29894
PUBLISHED
CVSS 5.900000095367432 MEDIUM
IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207320.
EPSS 0.10% · 26.7th percentile
Risk Scores
CVSS 3.0
5.900000095367432
CVSS:3.0/C:H/PR:N/AC:H/I:N/A:N/S:U/UI:N/AV:N/E:U/RL:O/RC:C
EPSS Score
0.10%
26.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM | Cloud Pak for Security | 1.7.2.0, 1.8.0.0, 1.7.0.0 |
| ibm | cloud_pak_for_security | 1.7.0.0, 1.7.2.0, 1.7.1.0 |
Exploit Intelligence
Timeline
- Sep 30, 2021 CVE Published
- Oct 1, 2021 EPSS Score
- Oct 5, 2021 EPSS Score
- Oct 11, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Jan 23, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 21, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
- Nov 5, 2022 EPSS Score