CVE-2021-20407

CWE-312 — Cleartext Storage of Sensitive Info3 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 77.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Verify Information Queue
Timeline
PublishedFeb 12
Latest updateMay 24

Description

IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/security_verify_information_queue1.0.6, 1.0.7+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-ww9w-54w3-crwx: IBM Security Verify Information Queue 1↗2022-05-24
▶
CVEList
IBM Security Verify Information Queue information disclosure↗2021-02-12
▶
CVE-2021-20407 (HIGH CVSS 7.5) | IBM Security Verify Information Que | cvebase.io