CVE-2021-20358 : Security Advisory and Response

This article provides details about CVE-2021-20358, a vulnerability found in IBM Cloud Pak for Automation version 20.0.3 and 20.0.2.IF002 that could lead to the exposure of sensitive information stored in clear text in API connection log files.

Understanding CVE-2021-20358

This section delves into the impact, technical details, and mitigation strategies related to CVE-2021-20358.

What is CVE-2021-20358?

CVE-2021-20358 involves the storage of potentially sensitive data in plaintext within API connection log files in IBM Cloud Pak for Automation versions 20.0.3 and 20.0.2.IF002, allowing unauthorized access to this information.

The Impact of CVE-2021-20358

The vulnerability possesses a CVSS v3.0 base score of 6.5, indicating a medium severity issue that could result in high confidentiality impact.

Technical Details of CVE-2021-20358

This section provides insights into the vulnerability description, affected systems, and exploitation mechanism.

Vulnerability Description

IBM Cloud Pak for Automation 20.0.3 and 20.0.2.IF002 store sensitive information in clear text in API connection log files, potentially accessible by users with log file reading permissions.

Affected Systems and Versions

The affected product is Cloud Pak for Automation by IBM, specifically versions 20.0.3 and 20.0.2.IF002.

Exploitation Mechanism

The vulnerability can be exploited by users with permissions to read log files, enabling them to access sensitive data stored in plaintext.

Mitigation and Prevention

This section outlines immediate steps to take and long-term security practices to enhance system defense against CVE-2021-20358.

Immediate Steps to Take

Users are advised to apply official fixes provided by IBM, review and restrict log file access permissions, and monitor API connection logs for unauthorized access.

Long-Term Security Practices

Implement encryption mechanisms for sensitive data, regularly update to the latest software versions, and conduct security audits to identify and address similar vulnerabilities.

Patching and Updates

Stay informed about security bulletins and patches released by IBM for Cloud Pak for Automation to address CVE-2021-20358 effectively.