PT-2021-3241 · Ibm · Ibm Security Verify Access

Published 2021-05-31 · Updated 2021-06-07 · CVE-2021-29665

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access version 20.07

Description The issue is related to a stack-based buffer overflow in the IBM Security Verify Access system, caused by improper bounds checking. This could allow a remote attacker to elevate privileges or execute arbitrary code. A local attacker may also execute arbitrary code on the system with elevated privileges.

Recommendations For IBM Security Verify Access version 20.07, consider applying security patches or updates to fix the improper bounds checking issue, which should prevent the stack-based buffer overflow. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2021-02956

CVE-2021-29665

Affected Products

Ibm Security Verify Access

References · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/199399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29665 · Security Note
• https://ibm.com/support/pages/node/6457315 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02956 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29665 · Vendor Advisory
• https://ibm.com/blogs/psirt/security-bulletin-multiple-security-vulnerabilities-have-been-resolved-in-ibm-application-gateway-cve-2021-20576-cve-2021-20575-cve-2021-29665 · Note