CVE-2021-39070

Published: Feb 2, 2022Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. IBM X-Force ID: 215353.

Affected (6)

Products: Ibm: Security Verify Access, Security Verify Access Docker

Ibm

2 products

Security Verify Access

Security Verify Access Docker

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Verify Access	Version 10.0.0
Ibm Security Verify Access	Version 10.0.1.0
Ibm Security Verify Access	Version 10.0.2.0
Ibm Security Verify Access Docker	Version 10.0.0
Ibm Security Verify Access Docker	Version 10.0.1.0
Ibm Security Verify Access Docker	Version 10.0.2.0

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/215353

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6552318

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/215353

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6552318

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.