Sensitive Information Disclosure in IBM Security Verify Information Queue
CVE-2021-20408
7.1HIGH
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 12 February 2021
Summary
IBM Security Verify Information Queue versions 1.0.6 and 1.0.7 have a vulnerability that allows local users to access sensitive information due to inadequate management of a plaintext cryptographic key. This issue could lead to unauthorized data exposure, compromising the confidentiality of the information stored within the affected product.
Affected Version(s)
Security Verify Information Queue 1.0.6
Security Verify Information Queue 1.0.7
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved