CVE-2021-20431

MEDIUM

IBM i2 Analyst's Notebook Premium <9.2.2 - Info Disclosure

Title source: llm

Description

IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/pages/node/6474865

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/196342

Scores

CVSS v3 6.5

EPSS 0.0094

EPSS Percentile 56.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE

CWE-613

Status published

Products (3)

ibm/i2_analysts_notebook 9.2.0

ibm/i2_analysts_notebook 9.2.1

ibm/i2_analysts_notebook 9.2.2

Published Jul 26, 2021

Tracked Since Feb 18, 2026