PT-2021-3241
CVE-2021-29665
·
Published
2021-05-31
·
Updated
2021-06-07
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Verify Access version 20.07
Description
The issue is related to a stack-based buffer overflow in the IBM Security Verify Access system, caused by improper bounds checking. This could allow a remote attacker to elevate privileges or execute arbitrary code. A local attacker may also execute arbitrary code on the system with elevated privileges.
Recommendations
For IBM Security Verify Access version 20.07, consider applying security patches or updates to fix the improper bounds checking issue, which should prevent the stack-based buffer overflow. As a temporary workaround, restrict access to sensitive areas of the system to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾