Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2021-20540

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923.

  • Published: Aug 2, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-20540
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
ibm / cloud_pak_for_security 1.5.0.0 1.5.0.0.x
ibm / cloud_pak_for_security 1.6.0.0 1.6.0.0.x
ibm / cloud_pak_for_security 1.7.1.0 1.7.1.0.x
ibm / cloud_pak_for_security 1.7.0.0 1.7.0.0.x
ibm / cloud_pak_for_security 1.6.1.0 1.6.1.0.x
ibm / cloud_pak_for_security 1.5.1.0 1.5.1.0.x