Severity
Medium
Analysis Summary
CVE-2021-39013
IBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user to obtain sensitive information in HTTP responses that could be used in further attacks against the system.
Impact
- Information Disclosure
Affected Vendors
IBM
Affected Products
- IBM Cloud Pak for Security 1.7.0.0
- IBM Cloud Pak for Security 1.7.1.0
- IBM Cloud Pak for Security 1.7.2.0
Remediation
Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.