CVE-2021-20508

published 2021-09-14

CVE-2021-20508: IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199322.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	security_secret_server	< 11.0	11.0
ibm	security_secret_server	—	—

CWE-209