CVE:CVE-2021-29859
CNNVD:CNNVD-202205-1882
IBM Cloud Pak for Business Automation是美国国际商业机器公司（IBM）的一组模块化的集成软件组件，专为任何混合云而构建，旨在实现工作自动化和加速业务增长。
IBM ICP4A（IBM Cloud Pak for Business Automation）V21.0.3 到 V21.0.3-IF008、V21.0.2 到 V21.0.2-IF009 和 V21.0.1 到 V21.0.1-IF007 存在安全漏洞。对系统具有物理访问权限的用户可以执行未经授权的操作或由于验证不充分而获取敏感信息并撤销另一个用户的注销操作。
solution:Upgrade ibm cloud_pak_for_business_automation to a higher version than 21.0.1,21.0.1:interim_fix_001,21.0.1:interim_fix_002,21.0.1:interim_fix_003,21.0.1:interim_fix_004,21.0.1:interim_fix_005,21.0.1:interim_fix_006,21.0.1:interim_fix_007,21.0.2,21.0.2:interim_fix_001,21.0.2:interim_fix_002,21.0.2:interim_fix_003,21.0.2:interim_fix_004,21.0.2:interim_fix_005,21.0.2:interim_fix_006,21.0.2:interim_fix_007,21.0.2:interim_fix_008,21.0.2:interim_fix_009,21.0.3,21.0.3:interim_fix_001,21.0.3:interim_fix_002,21.0.3:interim_fix_003,21.0.3:interim_fix_004,21.0.3:interim_fix_005,21.0.3:interim_fix_006,21.0.3:interim_fix_007,21.0.3:interim_fix_008,and avoid the version 21.0.1,21.0.1:interim_fix_001,21.0.1:interim_fix_002,21.0.1:interim_fix_003,21.0.1:interim_fix_004,21.0.1:interim_fix_005,21.0.1:interim_fix_006,21.0.1:interim_fix_007,21.0.2,21.0.2:interim_fix_001,21.0.2:interim_fix_002,21.0.2:interim_fix_003,21.0.2:interim_fix_004,21.0.2:interim_fix_005,21.0.2:interim_fix_006,21.0.2:interim_fix_007,21.0.2:interim_fix_008,21.0.2:interim_fix_009,21.0.3,21.0.3:interim_fix_001,21.0.3:interim_fix_002,21.0.3:interim_fix_003,21.0.3:interim_fix_004,21.0.3:interim_fix_005,21.0.3:interim_fix_006,21.0.3:interim_fix_007,21.0.3:interim_fix_008