PT-2021-18416
CVE-2021-29699
·
Published
2021-07-15
·
Updated
2021-09-29
Description by
CVSS 3.1
6.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Verify Access Docker version 10.0.0
Description
The issue allows a remote privileged user to upload arbitrary files with dangerous file types that could be executed by a user.
Recommendations
For IBM Security Verify Access Docker version 10.0.0, consider restricting file uploads to only trusted sources and validating file types to prevent the execution of malicious files until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾