CVE-2021-20498: Infoleak

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-20498.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'IBM Security Access Manager Docker reveals version information in HTTP requets that could be used in…'.

Q: What is the severity of CVE-2021-20498?

The severity of CVE-2021-20498 is medium with a severity value of 5.3.

Q: What is the affected software for this vulnerability?

The affected software for this vulnerability is IBM Security Verify Access Docker version 10.0.0.

Q: How can this vulnerability be exploited?

This vulnerability can be exploited by using the version information revealed in HTTP requests to launch further attacks against the system.

Published May 17, 2021

Updated

IBM Security Access Manager Docker reveals version information in HTTP requets that could be used in further attacks against the system.

Other sources

IBM Security Verify Access Docker 10.0.0 reveals version information in HTTP requests that could be used in further attacks against the system. IBM X-Force ID: 197972.

Affected Software

3 affected components

IBM Security Verify Access Docker<=10.0.0

IBM Security Verify Access=10.0.0

Docker docker

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6471895

Event History

May 17, 2021

CVE Published

via IBM·12:00 AM

Jul 15, 2021

CVE Published

via MITRE·05:15 PM

Data Sourced

via MITRE·05:15 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6471895

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?