PT-2021-18399 · Ibm · Ibm Security Verify

Chris Shepherd + 7 · Published 2021-06-25 · Updated 2021-06-30 · CVE-2021-29676

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Verify version 10.9.66

Description The issue allows a remote attacker to conduct various attacks against the vulnerable system by persuading a victim to click on a specially-crafted URL link. This can lead to cross-site scripting, cache poisoning, or session hijacking.

Recommendations For IBM Security Verify version 10.9.66, consider restricting access to sensitive areas of the system until a fix is available, and avoid using specially-crafted URL links to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2021-29676

Affected Products

Ibm Security Verify

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-29676 · Security Note
• https://ibm.com/support/pages/node/6467045 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29676 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/199575 · Note