CVE-2021-20499

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/197973
• https://www.ibm.com/support/pages/node/6471895 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6471895

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2021-20499.

• What is the title of this vulnerability?

  The title of this vulnerability is "IBM Security Access Manager Docker could allow a remote attacker to obtain sensitive information."

• What is the affected software in this vulnerability?

  The affected software in this vulnerability is IBM Security Verify Access Docker version 10.0.0.

• What is the severity rating for this vulnerability?

  The severity rating for this vulnerability is medium.

• What is the CWE category associated with this vulnerability?

  The CWE category associated with this vulnerability is CWE-209.

• How can a remote attacker exploit this vulnerability?

  A remote attacker can exploit this vulnerability by obtaining sensitive information through a detailed technical error message returned in the browser.

• What is the IBM X-Force ID for this vulnerability?

  The IBM X-Force ID for this vulnerability is 197973.

• Are there any references available for this vulnerability?

  Yes, there are references available for this vulnerability. They can be found at the following links: [Reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/197973), [Reference 2](https://www.ibm.com/support/pages/node/6471895).