CVE-2021-20511

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0

Description: The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing dot dot sequences (/../) to view arbitrary files on the system.

Recommendations: For IBM Security Verify Access Docker version 10.0.0, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available. Avoid using URL requests that contain dot dot sequences (/../) in the affected API endpoint until the issue is resolved.