PT-2021-18399
CVE-2021-29676
·
تاريخ النشر
2021-06-25
·
تاريخ التحديث
2021-06-30
الوصف من
CVSS 2.0
5.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Verify version 10.9.66
Description
The issue allows a remote attacker to conduct various attacks against the vulnerable system by persuading a victim to click on a specially-crafted URL link. This can lead to cross-site scripting, cache poisoning, or session hijacking.
Recommendations
For IBM Security Verify version 10.9.66, consider restricting access to sensitive areas of the system until a fix is available, and avoid using specially-crafted URL links to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾