CVE-2021-38887
Last modified
CVE-2021-38887 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401.. EPSS estimates a 0.78% chance of exploitation in the next 30 days.
Description
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Infosphere Information Server | 11.7 |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/209401VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6510178Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/209401VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6510178Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-38887?
How severe is CVE-2021-38887?
How do I fix CVE-2021-38887?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-38878IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor t…7.5
- CVE-2021-38879IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 c…5.3
- CVE-2021-3888libmobi is vulnerable to Use of Out-of-range Pointer Offset8.1
- CVE-2021-38882IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privi…4.4
- CVE-2021-38883IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 a…5.4
- CVE-2021-38886IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerabl…8.8
- CVE-2021-3889libmobi is vulnerable to Use of Out-of-range Pointer Offset8.1
- CVE-2021-38890IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an…7.5
- CVE-2021-38891IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses we…7.5
- CVE-2021-38892Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-38893IBM Business Process Manager 8.5 and 8.6 and IBM Business Au…5.4
- CVE-2021-38894IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could all…2.7
Are you affected by CVE-2021-38887?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST