PT-2021-13939

CVE-2021-20404

·

Published

2021-02-11

·

Updated

2021-02-12

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue versions 1.0.6 through 1.0.7
Description: The issue allows a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins.
Recommendations: For versions 1.0.6 and 1.0.7, consider restricting access to the login functionality until a patch is available to prevent exploitation of the invalid cookie value issue. As a temporary workaround, consider implementing additional validation on the cookie value to prevent denial of service attacks.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾