CVE-2021-20407: IBM Security Verify Information Queue information disclosure
First published: Thu Feb 04 2021(Updated: )
IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Verify Information Queue | =1.0.6 | |
| IBM Security Verify Information Queue | =1.0.7 | |
| Linux Linux kernel | ||
| IBM Security Verify Information Queue | <=1.0.6, 1.0.7 | |
| All of | ||
| Any of | ||
| IBM Security Verify Information Queue | =1.0.6 | |
| IBM Security Verify Information Queue | =1.0.7 | |
| Linux Linux kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for IBM Security Verify Information Queue?
The vulnerability ID for IBM Security Verify Information Queue is CVE-2021-20407.
What is the severity rating of CVE-2021-20407?
The severity rating of CVE-2021-20407 is high, with a score of 7.5.
How does CVE-2021-20407 affect IBM Security Verify Information Queue?
CVE-2021-20407 allows sensitive information in the source code of IBM Security Verify Information Queue to be disclosed, potentially leading to further attacks against the system.
Which versions of IBM Security Verify Information Queue are affected by CVE-2021-20407?
Versions 1.0.6 and 1.0.7 of IBM Security Verify Information Queue are affected by CVE-2021-20407.
How can I fix CVE-2021-20407?
To fix CVE-2021-20407, it is recommended to update IBM Security Verify Information Queue to a version that does not have this vulnerability.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/title
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/softwarecombine
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/ibm
- canonical/ibm security verify information queue
- version/ibm security verify information queue/1.0.6
- version/ibm security verify information queue/1.0.7
- vendor/linux
- canonical/linux linux kernel
- version/ibm security verify information queue/1.0.6, 1.0.7