PT-2021-14024 · Ibm · Ibm Security Verify Access Docker

Published 2021-07-15 · Updated 2021-09-29 · CVE-2021-20534

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0

Description: A remote attacker could conduct phishing attacks using an open redirect attack. The attacker could persuade a victim to visit a specially crafted Web site, exploiting this issue to spoof the URL displayed and redirect the user to a malicious Web site that appears trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Recommendations: For IBM Security Verify Access Docker version 10.0.0, consider restricting access to the affected Docker instance until a patch is available. As a temporary workaround, avoid using links from untrusted sources to minimize the risk of exploitation.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2021-20534

Affected Products

Ibm Security Verify Access Docker

References · 4

• https://ibm.com/support/pages/node/6471895 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20534 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/198814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20534 · Security Note