6.5
Moyenne
CVE-2023-38367 IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2,…
Description
IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2) allows CRUD Operations with an invalid token. This could allow an unauthenticated attacker to view, update, delete or create an IdP configuration. IBM X-Force ID: 261130.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Pak for Automation | Versions non publiées | |
| cloud_pak_for_automation 22.0 | 22.0.1 → 22.0.2 | Pas de correctif indiqué |
| cloud_pak_for_automation 21.0 | 21.0.1 → 21.0.3 | Pas de correctif indiqué |
| cloud_pak_for_automation 20.0 | 20.0.1 → 20.0.3 | Pas de correctif indiqué |
| cloud_pak_for_automation 19.0 | 19.0.1 → 19.0.3 | Pas de correctif indiqué |
| cloud_pak_for_automation 18.0 | 18.0.0 → 18.0.2 | Pas de correctif indiqué |
Autres CVE de Cloud Pak for Automation
Les 11 CVE de Cloud Pak for Automation →
CVE-2023-35899
IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2,…
7.0
Élevée
CVE-2021-29872
IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header…
5.4
Moyenne
CVE-2021-38966
IBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2021-38900
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a…
4.9
Moyenne