CVE-2021-29873

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected software

VendorProductVersions
IBMFlashSystem 9001.6.1.4; 1.5.2.10
IBMFlashSystem V90007.8; 8.4
IBMStorwize V35007.8; 8.4
IBMStorwize V50007.8; 8.4
IBMStorwize V51008.4; 7.8
IBMFlashSystem 9100 Family8.4; 7.8
IBMStorwize V37007.8; 8.4
IBMSAN Volume Controller7.8; 8.4
IBMStorwize V70008.4; 7.8
IBMSpectrum Virtualize Software7.8; 8.4
IBMSpectrum Virtualize for Public Cloud7.8; 8.4

References

Timeline

Published
Oct 21, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-298757.5IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third party domain access vCVE-2021-298785.4IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed CVE-2021-298806.5IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disclosure between tenantCVE-2021-298834.3IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization tokenCVE-2021-298888.8IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unCVE-2021-298914.9IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause it to lose network CVE-2021-298925.9IBM Cognos Controller 11.0.0 and 11.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enaCVE-2021-298947.5IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than expected cryptographic algorithms that could allowCVE-2021-298996.5IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of service. IBM X-Force IDCVE-2021-299039.8IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially CVE-2021-299045.5IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI displays user credentials in plain clear text which can be read CVE-2021-299055.4IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting. This vulnerability allows
CVE-2021-29873: High severity, CVSS 8.1 | Vulnix