3.5
Low
CVE-2021-29859 IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008,…
Description
IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.0.2 through V21.0.2-IF009, and V21.0.1 through V21.0.1-IF007) could allow a user with physical access to the system to perform unauthorized actions or obtain sensitive information due to insufficient validation and recvocation another user logouting out. IBM X-Force ID: 206081.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Pak for Business Automation 21.0 | 21.0.1 → 21.0.3 | No fix stated |
| Cloud Pak for Business Automation 20.0 | 20.0.1 → 20.0.3 | No fix stated |
| Cloud Pak for Business Automation 19.0 | 19.0.1 → 19.0.3 | No fix stated |
| Cloud Pak for Business Automation 18.0 | 18.0.0 → 18.0.2 | No fix stated |
Other CVEs of Cloud Pak for Business Automation
The 28 CVEs of Cloud Pak for Business Automation →
CVE-2026-11864
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005,…
6.5
Medium
CVE-2026-12749
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2026-12750
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2026-12751
IBM Cloud Pak for Business Automation is vulnerable to HTML injection
5.4
Medium