PT-2021-18399

CVE-2021-29676

·

تاريخ النشر

2021-06-25

·

تاريخ التحديث

2021-06-30

الوصف من

CVSS 2.0
5.8
متوسطة
المقاييسAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Security Verify version 10.9.66
Description The issue allows a remote attacker to conduct various attacks against the vulnerable system by persuading a victim to click on a specially-crafted URL link. This can lead to cross-site scripting, cache poisoning, or session hijacking.
Recommendations For IBM Security Verify version 10.9.66, consider restricting access to sensitive areas of the system until a fix is available, and avoid using specially-crafted URL links to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾