CVE-2021-29665: Buffer Overflow
IBM Application Gateway could disclose sensitive information in HTTP server headers that could be used in further attacks against the system.
Other sources
IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-29665?
CVE-2021-29665 is a vulnerability in IBM Application Gateway that could disclose sensitive information in HTTP server headers.
What is the severity of CVE-2021-29665?
CVE-2021-29665 has a severity rating of 7.8 (critical).
How does CVE-2021-29665 affect IBM Security Verify Access 20.07?
CVE-2021-29665 affects IBM Security Verify Access 20.07 by allowing a local attacker to execute arbitrary code on the system with elevated privileges.
Is there a fix available for CVE-2021-29665?
Yes, IBM has released a fix for CVE-2021-29665. It is recommended to update to the latest version of IBM Security Verify Access.
Where can I find more information about CVE-2021-29665?
You can find more information about CVE-2021-29665 on the IBM X-Force Exchange website and the IBM Support pages.