CVE-2021-29767 Information disclosure in i2 Analyst's Notebook Premium

What is CVE-2021-29767?

CVE-2021-29767 is a medium-severity vulnerability in IBM i2 Analyst's Notebook Premium, published on 26 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681.

Weakness: CWE-209

Which versions are affected by CVE-2021-29767?

It affects 1 product.

Products include Ibm I2 Analysts Notebook.

How do I fix CVE-2021-29767?

No fix has been published for CVE-2021-29767 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-29767 being exploited?

There is no known exploitation of CVE-2021-29767 in the wild and no public exploit code.

Other vulnerabilities in IBM i2 Analyst's Notebook Premium

• CVE-2020-4721 Memory corruption in i2 Analyst Notebook High 7.8
• CVE-2020-4722 Memory corruption in i2 Analyst Notebook High 7.8
• CVE-2020-4723 Memory corruption in i2 Analyst Notebook High 7.8
• CVE-2020-4724 Memory corruption in i2 Analyst Notebook High 7.8
• CVE-2020-4549 Memory corruption in i2 Analyst Notebook High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3x33-rgq6-x937.