Lucene search

IbmCVE-2021-29868

HistoryOct 27, 2021 - 4:15 p.m.

CVE-2021-29868

2021-10-2716:15:07

CWE-613

ibm

web.nvd.nist.gov

ibm

i2 ibase

8.9.13

9.0.0

local attacker

sensitive information

exposure

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

IBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 206213.

Affected configurations

Nvd

Vulners

Node

ibmi2_ibaseMatch8.9.13

ibmi2_ibaseMatch9.0.0

VendorProductVersionCPE
ibmi2_ibase8.9.13cpe:2.3:a:ibm:i2_ibase:8.9.13:*:*:*:*:*:*:*
ibmi2_ibase9.0.0cpe:2.3:a:ibm:i2_ibase:9.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	i2_ibase	8.9.13	cpe:2.3:a:ibm:i2_ibase:8.9.13:::::::*
ibm	i2_ibase	9.0.0	cpe:2.3:a:ibm:i2_ibase:9.0.0:::::::*

CNA Affected

[
  {
    "product": "i2 iBase",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.9.13"
      },
      {
        "status": "affected",
        "version": "9.0.0"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/206213

www.ibm.com/support/pages/node/6508776

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-29868