CVE-2021-20358

published 2021-02-08

CVE-2021-20358: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	cloud_pak_for_automation	—	—
ibm	cloud_pak_for_automation	—	—
ibm	cloud_pak_for_automation	—	—

CWE-312