Vulnerabilities > IBM > Security Verify Bridge > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-09-23 CVE-2021-20434 Insufficiently Protected Credentials vulnerability in IBM Security Verify Bridge
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user.
local
low complexity
ibm CWE-522
4.4
2021-09-23 CVE-2021-20435 Improper Certificate Validation vulnerability in IBM Security Verify Bridge
IBM Security Verify Bridge 1.0.5.0 does not properly validate a certificate which could allow a local attacker to obtain sensitive information that could aid in further attacks against the system.
local
low complexity
ibm CWE-295
5.5
2021-09-23 CVE-2021-38863 Insufficiently Protected Credentials vulnerability in IBM Security Verify Bridge
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user.
local
low complexity
ibm CWE-522
5.5
2021-03-03 CVE-2021-20441 Use of a Broken or Risky Cryptographic Algorithm vulnerability in IBM Security Verify Bridge
IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
network
high complexity
ibm CWE-327
5.9