{"id":"CVE-2021-20541","aliases":["EUVD-2021-7959","GHSA-r22g-mj68-3phv"],"status":"published","title":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could...","description":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927.","severity":{"version":"3.0","score":3.7,"vector":"CVSS:3.0/A:N/AV:N/AC:H/I:N/PR:N/C:L/UI:N/S:U/RL:O/RC:C/E:U","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00868,"percentile":0.59211,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-863"],"published":"2021-08-02T16:35:23Z","modified":"2026-06-17T03:33:59Z","products":[{"vendor":"ibm","product":"cloud pak for security"},{"vendor":"ibm","product":"cloud_pak_for_security"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6476940","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/198927","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20541"},{"url":"https://github.com/advisories/GHSA-r22g-mj68-3phv"}],"sources":{"cve":[{"id":"CVE-2021-20541","description":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927.","status":"published","published":"2021-08-02T16:35:23.472Z","modified":"2024-09-16T19:10:36.538Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/A:N/AV:N/AC:H/I:N/PR:N/C:L/UI:N/S:U/RL:O/RC:C/E:U","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7959","description":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927.","status":"published","published":"2021-08-02T16:35:23Z","modified":"2024-09-16T19:10:36Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/A:N/AV:N/AC:H/I:N/PR:N/C:L/UI:N/S:U/RL:O/RC:C/E:U","level":"low"}],"updated_at":"2026-11-03T00:55:25.259735Z"}],"ghsa":[{"id":"GHSA-r22g-mj68-3phv","title":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could...","description":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927.","status":"published","published":"2022-05-24T19:09:34Z","modified":"2023-01-27T05:03:04Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:42:09.625504Z"}],"nvd":[{"id":"CVE-2021-20541","description":"IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198927.","status":"published","published":"2021-08-02T17:15:13.557Z","modified":"2026-06-17T03:33:59.757Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:56.562207Z"}]}}