CVE-2021-38960 - Vulnerability Details

Vendors	Products
Ibm	Power Hardware Management Console \(7063-cr2\) Power Hardware Management Console \(7063-cr2\) Firmware Power System Ac922 \(8335-gth\) Power System Ac922 \(8335-gth\) Firmware Power System Ac922 \(8335-gtx\) Power System Ac922 \(8335-gtx\) Firmware

Link	Providers
https://exchange.xforce.ibmcloud.com/vulnerabilities/212047
https://www.ibm.com/support/pages/node/6529322

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "OPENBMC", "vendor": "IBM", "versions": [{"status": "affected", "version": "OP920"}, {"status": "affected", "version": "OP930"}, {"status": "affected", "version": "OP940"}]}, {"product": "HMC", "vendor": "IBM", "versions": [{"status": "affected", "version": "OP940"}]}], "datePublic": "2022-02-02T00:00:00", "descriptions": [{"lang": "en", "value": "IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "exploitCodeMaturity": "UNPROVEN", "integrityImpact": "NONE", "privilegesRequired": "NONE", "remediationLevel": "OFFICIAL_FIX", "reportConfidence": "CONFIRMED", "scope": "UNCHANGED", "temporalScore": 4.6, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/PR:N/I:N/AC:L/S:U/A:N/UI:N/C:L/RL:O/E:U/RC:C", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-02-04T22:33:07", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.ibm.com/support/pages/node/6529322"}, {"name": "ibm-openbmc-cve202138960-info-disc (212047)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/212047"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2022-02-02T00:00:00", "ID": "CVE-2021-38960", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "OPENBMC", "version": {"version_data": [{"version_value": "OP920"}, {"version_value": "OP930"}, {"version_value": "OP940"}]}}, {"product_name": "HMC", "version": {"version_data": [{"version_value": "OP940"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047."}]}, "impact": {"cvssv3": {"BM": {"A": "N", "AC": "L", "AV": "N", "C": "L", "I": "N", "PR": "N", "S": "U", "UI": "N"}, "TM": {"E": "U", "RC": "C", "RL": "O"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "https://www.ibm.com/support/pages/node/6529322", "refsource": "CONFIRM", "title": "IBM Security Bulletin 6529322 (OPENBMC)", "url": "https://www.ibm.com/support/pages/node/6529322"}, {"name": "ibm-openbmc-cve202138960-info-disc (212047)", "refsource": "XF", "title": "X-Force Vulnerability Report", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/212047"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T01:51:20.780Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.ibm.com/support/pages/node/6529322"}, {"name": "ibm-openbmc-cve202138960-info-disc (212047)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/212047"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2021-38960", "datePublished": "2022-02-04T22:33:07.197461Z", "dateReserved": "2021-08-16T00:00:00", "dateUpdated": "2024-09-16T16:27:49.654Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : OPENBMC (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : OP920 (string)

}

1 : { »

status : affected (string)

version : OP930 (string)

}

2 : { »

status : affected (string)

version : OP940 (string)

}

]

}

1 : { »

product : HMC (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : OP940 (string)

}

]

}

]

datePublic : 2022-02-02T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

exploitCodeMaturity : UNPROVEN (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

remediationLevel : OFFICIAL_FIX (string)

reportConfidence : CONFIRMED (string)

scope : UNCHANGED (string)

temporalScore : 4.6 (number)

temporalSeverity : MEDIUM (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/PR:N/I:N/AC:L/S:U/A:N/UI:N/C:L/RL:O/E:U/RC:C (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Obtain Information (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-02-04T22:33:07 (string)

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www.ibm.com/support/pages/node/6529322 (string)

}

1 : { »

name : ibm-openbmc-cve202138960-info-disc (212047) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/212047 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@us.ibm.com (string)

DATE_PUBLIC : 2022-02-02T00:00:00 (string)

ID : CVE-2021-38960 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : OPENBMC (string)

version : { »

version_data : [ »

0 : { »

version_value : OP920 (string)

}

1 : { »

version_value : OP930 (string)

}

2 : { »

version_value : OP940 (string)

}

]

}

1 : { »

product_name : HMC (string)

version : { »

version_data : [ »

0 : { »

version_value : OP940 (string)

}

]

}

]

}

vendor_name : IBM (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047. (string)

}

]

}

impact : { »

cvssv3 : { »

BM : { »

A : N (string)

AC : L (string)

AV : N (string)

C : L (string)

I : N (string)

PR : N (string)

S : U (string)

UI : N (string)

}

TM : { »

E : U (string)

RC : C (string)

RL : O (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Obtain Information (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.ibm.com/support/pages/node/6529322 (string)

refsource : CONFIRM (string)

title : IBM Security Bulletin 6529322 (OPENBMC) (string)

url : https://www.ibm.com/support/pages/node/6529322 (string)

}

1 : { »

name : ibm-openbmc-cve202138960-info-disc (212047) (string)

refsource : XF (string)

title : X-Force Vulnerability Report (string)

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/212047 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T01:51:20.780Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www.ibm.com/support/pages/node/6529322 (string)

}

1 : { »

name : ibm-openbmc-cve202138960-info-disc (212047) (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_XF (string)

2 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/212047 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

assignerShortName : ibm (string)

cveId : CVE-2021-38960 (string)

datePublished : 2022-02-04T22:33:07.197461Z (string)

dateReserved : 2021-08-16T00:00:00 (string)

dateUpdated : 2024-09-16T16:27:49.654Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:power_system_ac922_\\(8335-gtx\\)_firmware:op920:*:*:*:*:*:*:*", "matchCriteriaId": "8A0581C8-30EE-4E6B-AD2C-1311E15763DA", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:power_system_ac922_\\(8335-gtx\\)_firmware:op930:*:*:*:*:*:*:*", "matchCriteriaId": "05F46F3C-50BD-4233-9964-8329000800AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:power_system_ac922_\\(8335-gtx\\)_firmware:op940:*:*:*:*:*:*:*", "matchCriteriaId": "83EC2B40-94E1-441A-A81A-702CF1A75FE8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ibm:power_system_ac922_\\(8335-gtx\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "30ABEAED-DCF7-4375-A3F4-06169211229A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:power_system_ac922_\\(8335-gth\\)_firmware:op920:*:*:*:*:*:*:*", "matchCriteriaId": "DDBB9515-0600-4D87-AC8C-1FBAA0A9841C", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:power_system_ac922_\\(8335-gth\\)_firmware:op930:*:*:*:*:*:*:*", "matchCriteriaId": "A6AAAEA5-FD16-4D72-B36C-3A48DD4C312D", "vulnerable": true}, {"criteria": "cpe:2.3:o:ibm:power_system_ac922_\\(8335-gth\\)_firmware:op940:*:*:*:*:*:*:*", "matchCriteriaId": "F2347DA8-4916-490C-B967-CAC04CE65C92", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ibm:power_system_ac922_\\(8335-gth\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "D95F0B5F-EFEE-4002-AB88-1DD0CE3CAC46", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ibm:power_hardware_management_console_\\(7063-cr2\\)_firmware:op940:*:*:*:*:*:*:*", "matchCriteriaId": "59EC8065-E256-4980-8553-172D25F9A728", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ibm:power_hardware_management_console_\\(7063-cr2\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "1DE050A1-9070-423C-B2AA-9F23C180D0A4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047."}, {"lang": "es", "value": "IBM OPENBMC OP920, OP930 y OP940, podr\u00edan permitir a un usuario no autenticado obtener informaci\u00f3n confidencial. IBM X-Force ID: 212047"}], "id": "CVE-2021-38960", "lastModified": "2024-11-21T06:18:18.233", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-02-04T23:15:11.733", "references": [{"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/212047"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6529322"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/212047"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6529322"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ibm:power_system_ac922_\(8335-gtx\)_firmware:op920:*:*:*:*:*:*:* (string)

matchCriteriaId : 8A0581C8-30EE-4E6B-AD2C-1311E15763DA (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:ibm:power_system_ac922_\(8335-gtx\)_firmware:op930:*:*:*:*:*:*:* (string)

matchCriteriaId : 05F46F3C-50BD-4233-9964-8329000800AF (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:ibm:power_system_ac922_\(8335-gtx\)_firmware:op940:*:*:*:*:*:*:* (string)

matchCriteriaId : 83EC2B40-94E1-441A-A81A-702CF1A75FE8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ibm:power_system_ac922_\(8335-gtx\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : 30ABEAED-DCF7-4375-A3F4-06169211229A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:op920:*:*:*:*:*:*:* (string)

matchCriteriaId : DDBB9515-0600-4D87-AC8C-1FBAA0A9841C (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:op930:*:*:*:*:*:*:* (string)

matchCriteriaId : A6AAAEA5-FD16-4D72-B36C-3A48DD4C312D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:ibm:power_system_ac922_\(8335-gth\)_firmware:op940:*:*:*:*:*:*:* (string)

matchCriteriaId : F2347DA8-4916-490C-B967-CAC04CE65C92 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ibm:power_system_ac922_\(8335-gth\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : D95F0B5F-EFEE-4002-AB88-1DD0CE3CAC46 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ibm:power_hardware_management_console_\(7063-cr2\)_firmware:op940:*:*:*:*:*:*:* (string)

matchCriteriaId : 59EC8065-E256-4980-8553-172D25F9A728 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ibm:power_hardware_management_console_\(7063-cr2\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1DE050A1-9070-423C-B2AA-9F23C180D0A4 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive information. IBM X-Force ID: 212047. (string)

}

1 : { »

lang : es (string)

value : IBM OPENBMC OP920, OP930 y OP940, podrían permitir a un usuario no autenticado obtener información confidencial. IBM X-Force ID: 212047 (string)

}

]

id : CVE-2021-38960 (string)

lastModified : 2024-11-21T06:18:18.233 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : psirt@us.ibm.com (string)

type : Secondary (string)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-02-04T23:15:11.733 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/212047 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/pages/node/6529322 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : VDB Entry (string)

1 : Vendor Advisory (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/212047 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/pages/node/6529322 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-200 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object