CVE-2021-38887 — Sensitive Information Exposure in IBM Infosphere Information Server

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.2%
top 62.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedNov 10
Latest updateMay 24

Description

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c454-qmr6-xqvq: IBM InfoSphere Information Server 11↗2022-05-24
▶
CVEList
CVE-2021-38887: IBM InfoSphere Information Server 11↗2021-11-10
▶
CVE-2021-38887 — Sensitive Information Exposure in IBM | cvebase