cbcvebase.
CVE-2021-29906
published 2021-10-08

CVE-2021-29906: IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose sensitive information to a local user when it is configured to…

PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.21%
11.7th percentile
IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, 1.3, 1.4 and 1.5 could disclose sensitive information to a local user when it is configured to use an IBM Cloud API key to connect to cloud-based connectors. IBM X-Force ID: 207630.

Affected

16 ranges
VendorProductVersion rangeFixed in
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——
ibmapp_connect_enterprise_certified_container——

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv3.05.1MEDIUMCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.01.9LOWAV:L/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.