8.8
High
CVE-2021-20423 IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper…
Description
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions. IBM X-Force ID: 196308.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Pak for Applications | 4.3 | No fix stated |
Other CVEs of Cloud Pak for Applications
The 12 CVEs of Cloud Pak for Applications →
CVE-2021-20424
IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed…
4.3
Medium
CVE-2021-20422
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored…
7.5
High
CVE-2021-20369
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to…
5.9
Medium
CVE-2021-20368
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting
5.4
Medium