IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 199236.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloud_pak_for_security | Ibm | 1.4.0.0 (including) | 1.4.0.0 (including) |
| Cloud_pak_for_security | Ibm | 1.5.0.0 (including) | 1.5.0.0 (including) |
| Cloud_pak_for_security | Ibm | 1.5.0.1 (including) | 1.5.0.1 (including) |
| Cloud_pak_for_security | Ibm | 1.6.0.0 (including) | 1.6.0.0 (including) |
| Cloud_pak_for_security | Ibm | 1.6.0.1 (including) | 1.6.0.1 (including) |