CVE-2021-20540: IBM Cloud Pak For Security

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthorized user through HTTP GET requests. This information could be used in further attacks against the system. IBM X-Force ID: 198923.

Affected products

• IBM Cloud Pak For Security: version 1.5.0.0 only; version 1.5.1.0 only; version 1.6.0.0 only; version 1.6.1.0 only; version 1.7.0.0 only; version 1.7.1.0 only

Published 2021-08-02. Last modified 2026-06-17.