CVE-2021-20435
CVE-2021-20435
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 2.5EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Sep 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 196355.
CVSS:3.0/S:U/AV:L/PR:L/AC:H/A:N/C:L/UI:N/I:N/RC:C/RL:O/E:U
Affected products
IBM · Security Verify Bridge