CVE-2021-38887 MEDIUM

CVE-2021-38887

Vendor Ibm
Product InfoSphere Information Server
Published November 10, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AC:L/I:N/AV:N/S:U/PR:L/UI:N/A:N/C:L/RL:O/E:U/RC:C

What the vulnerability does

01Description

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401.

Key dates

02Disclosure timeline

November 10, 2021 CVE published
September 17, 2024 Record updated