CVE-2021-29846

CWE-613 — Insufficient Session ExpirationCWE-200 — Information Exposure3 documents3 sources
Severity
2.7LOW
EPSS
0.1%
top 70.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium Insights
Timeline
PublishedJan 26
Latest updateJan 27

Description

IBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 205256.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:NExploitability: 1.2 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-244j-xp9p-xr45: IBM Security Guardium Insights 3↗2022-01-27
▶
CVEList
CVE-2021-29846: IBM Security Guardium Insights 3↗2022-01-26
▶