PT-2022-10820 · Ibm · Ibm Security Verify

Published 2022-01-07 · Updated 2022-01-13 · CVE-2021-38957

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Verify versions 10.0.0 through 10.0.2.0

Description The issue is related to hazardous input validation during QR code generation, which could disclose sensitive information.

Recommendations For versions 10.0.0 through 10.0.2.0, update to a version that includes a fix for the hazardous input validation issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-38957

Affected Products

Ibm Security Verify

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-38957 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38957 · Vendor Advisory
• https://ibm.com/support/pages/node/6538418 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/212040 · Vendor Advisory
• https://t.me/cvenotify/25148 · Telegram Post