PT-2021-13966 · Ibm · Ibm Security Verify Access Docker+1

Published 2021-07-15 · Updated 2021-07-31 · CVE-2021-20439

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager version 9.0 IBM Security Verify Access Docker version 10.0.0

Description: The issue concerns the storage of user credentials in plain clear text, making them accessible to unauthorized users.

Recommendations: For IBM Security Access Manager version 9.0, update the configuration to securely store user credentials. For IBM Security Verify Access Docker version 10.0.0, modify the Docker container settings to encrypt and protect user credentials.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2021-20439

Affected Products

Ibm Security Access Manager

Ibm Security Verify Access Docker

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/196453 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20439 · Vendor Advisory
• https://ibm.com/support/pages/node/6471903 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20439 · Security Note