Cross-Site Scripting in IBM Security Verify Privilege Vault
CVE-2021-29677
5.4MEDIUM
Summary
IBM Security Verify Privilege Vault version 10.9.66 is susceptible to a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code into the web user interface. This exploitation compromises the integrity of the application, allowing unauthorized modifications that may result in the exposure of sensitive user credentials during a trusted session.
Affected Version(s)
Security Verify Privilege Vault 10.9.66
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved