CVE-2021-20410

IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190.

Score

CVSS 3.1 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2021-02-12

Last modified

2024-09-17

Weaknesses

CWE-522

Affected products

• Security Verify Information Queue (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/196190
• https://www.ibm.com/support/pages/node/6414773