Lucene search

K
cvelistIbmCVELIST:CVE-2021-29770
HistoryJul 26, 2021 - 12:10 p.m.

CVE-2021-29770

2021-07-2612:10:45
ibm
www.cve.org
3
ibm
i2 analyze
hazardous input

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N/E:U/RL:O/RC:C

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

19.6%

IBM i2 Analyst’s Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.

CNA Affected

[
  {
    "product": "i2 Analyze",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.0"
      },
      {
        "status": "affected",
        "version": "4.3.1"
      },
      {
        "status": "affected",
        "version": "4.3.2"
      }
    ]
  }
]

CVSS3

4.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N/E:U/RL:O/RC:C

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

19.6%

Related for CVELIST:CVE-2021-29770