Vulnerabilities > IBM > Security Verify Access > 20.07

DATE CVE VULNERABILITY TITLE RISK
2021-06-01 CVE-2021-20575 Insecure Storage of Sensitive Information vulnerability in IBM Application Gateway and Security Verify Access
IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system.
local
low complexity
ibm CWE-922
3.3
2021-06-01 CVE-2021-20576 Unspecified vulnerability in IBM Application Gateway and Security Verify Access
IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash.
network
low complexity
ibm
7.5
2021-06-01 CVE-2021-20585 Information Exposure vulnerability in IBM Security Verify Access 20.07
IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system.
network
low complexity
ibm CWE-200
5.3
2021-06-01 CVE-2021-29665 Out-of-bounds Write vulnerability in IBM Security Verify Access 20.07
IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges.
local
low complexity
ibm CWE-787
7.8