Vulnerability in Ibm Security Verify Bridge
CVE-2021-20435
IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355.
EPSS: 0.000 (6.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.5 (Low). Vector: CVSS:3.0/S:U/AV:L/PR:L/AC:H/A:N/C:L/UI:N/I:N/RC:C/RL:O/E:U.
Affected products
- Ibm Security Verify Bridge — versions 1.0.5.0
References
- www.ibm.com/support/pages/node/6491651 (x_refsource_CONFIRM)
- ibm-svb-cve202120435-info-disc (196355) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2021-20435?
- CVE-2021-20435 is a low-severity vulnerability in Ibm Security Verify Bridge. CVSS score: 2.5/10. Published 2021-09-23.
- How severe is CVE-2021-20435?
- Low severity. CVSS v3 base score is 2.5 out of 10.