CVE-2021-38859

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a specially crafted HTTP request that could be used in further attacks against the system. IBM X-Force ID: 207899.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:ibm:security_verify_privilege_on-premises:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:18

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.3
v2 : unknown
v3 : 4.3
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/207899 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/207899 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7047202 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/7047202 - Patch, Vendor Advisory

18 Oct 2023, 17:59

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
First Time Microsoft
Ibm security Verify Privilege On-premises
Apple
Ibm
Apple macos
Microsoft windows
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/207899 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/207899 - VDB Entry, Vendor Advisory
References (MISC) https://www.ibm.com/support/pages/node/7047202 - (MISC) https://www.ibm.com/support/pages/node/7047202 - Patch, Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_privilege_on-premises:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

17 Oct 2023, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-17 02:15

Updated : 2024-11-21 06:18


NVD link : CVE-2021-38859

Mitre link : CVE-2021-38859

CVE.ORG link : CVE-2021-38859


JSON object : View

Products Affected

apple

  • macos

microsoft

  • windows

ibm

  • security_verify_privilege_on-premises
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo