CVE-2021-20498

CWE-200 — Information Exposure3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.2%
top 62.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security Verify Access DockerIBM Security Verify Access
Timeline
PublishedJul 15
Latest updateMay 24

Description

IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system. IBM X-Force ID: 197972.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-5q37-9r6j-q5mh: IBM Security Verify Access Docker 10↗2022-05-24
▶
CVEList
CVE-2021-20498: IBM Security Verify Access Docker 10↗2021-07-15
▶
CVE-2021-20498 (MEDIUM CVSS 5.3) | IBM Security Verify Access Docker 1 | cvebase.io