2.7
Low
CVE-2021-20540 IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive…
Description
IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Pak for Security 1.7 | 1.7.0.0 → 1.7.1.0 | No fix stated |
| Cloud Pak for Security 1.6 | 1.6.0.0 → 1.6.0.1 | No fix stated |
| Cloud Pak for Security 1.5 | 1.5.0.0 → 1.5.0.1 | No fix stated |
Other CVEs of Cloud Pak for Security
The 55 CVEs of Cloud Pak for Security →
CVE-2025-25020
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could…
6.5
Medium
CVE-2025-1334
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows…
4.0
Medium
CVE-2025-25021
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could…
7.2
High
CVE-2025-25022
IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could…
9.6
Critical