Cross-Site Scripting in IBM Security Verify Privilege Vault
CVE-2021-29677

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Security Verify Privilege Vault
Vendor
CVE Published:
25 June 2021

What is CVE-2021-29677?

IBM Security Verify Privilege Vault version 10.9.66 is susceptible to a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code into the web user interface. This exploitation compromises the integrity of the application, allowing unauthorized modifications that may result in the exposure of sensitive user credentials during a trusted session.

Affected Version(s)

Security Verify Privilege Vault 10.9.66

References

https://www.ibm.com/support/pages/node/6467045
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/199578
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.