Vulnerabilities > IBM > Security Verify Access > High

DATE CVE VULNERABILITY TITLE RISK
2021-07-15 CVE-2021-20533 Unspecified vulnerability in IBM Security Verify Access 10.0.0
IBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
network
low complexity
ibm
7.2
2021-07-15 CVE-2021-29742 Unspecified vulnerability in IBM Security Verify Access 10.0.0
IBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system.
low complexity
ibm
8.0
2021-07-15 CVE-2021-20439 Insufficiently Protected Credentials vulnerability in IBM Security Access Manager and Security Verify Access
IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.
network
low complexity
ibm CWE-522
7.5
2021-06-01 CVE-2021-20576 Unspecified vulnerability in IBM Application Gateway and Security Verify Access
IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash.
network
low complexity
ibm
7.5
2021-06-01 CVE-2021-29665 Out-of-bounds Write vulnerability in IBM Security Verify Access 20.07
IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges.
local
low complexity
ibm CWE-787
7.8