PublicCVE

CVE-2021-20537

MEDIUM6.5JSON exportCreate alert

Description

IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID:198918

CVSS breakdown

CVSS 3.0
Attack Complexity
Low
Attack Vector
Network
Availability
None
Confidentiality
High
User Interaction
None
Privileges Required
Low
Integrity
None
Scope
Unchanged
E
Unchanged
RL
O
RC
Changed

Affected products