CVE-2021-20538: IBM Cloud Pak For Security

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect authorization mechanisms. IBM X-Force ID: 198919.

Affected products

• IBM Cloud Pak For Security: version 1.5.0.0 only; version 1.5.0.1 only

Published 2021-05-10. Last modified 2026-06-17.