CVE-2021-20439

Опубликовано: 15 июл. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/196453
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6471903
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/196453
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6471903
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_access_manager:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00205

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522

Связанные уязвимости

GHSA-wm4f-m9qr-q5j6

github

больше 3 лет назад

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.

EPSS

Процентиль: 42%

0.00205

Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-522