Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20372 State: PUBLISHED Published: 2021-10-07T18:05:43.632440Z Last Updated: 2024-09-16T16:34:03.285Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AC:L/PR:L/AV:N/UI:N/A:L/C:N/S:U/E:U/RC:C/RL:O) Vendors: IBM Products: Sterling File Gateway Problem Types: Denial of Service Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195518
CVE ID: CVE-2021-20373 State: PUBLISHED Published: 2021-12-09T17:00:24.045474Z Last Updated: 2024-09-17T00:45:54.177Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/UI:N/A:N/AC:H/I:N/PR:N/S:U/AV:N/C:H/RL:O/RC:C/E:U) Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Obtain Information Description: IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6523804 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
iner: References: - https://www.ibm.com/support/pages/node/6523804 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195521 - https://security.netapp.com/advisory/ntap-20220225-0005/
CVE ID: CVE-2021-20374 State: PUBLISHED Published: 2021-05-19T19:40:21.127628Z Last Updated: 2024-09-16T22:20:54.229Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/S:U/AV:N/I:L/PR:N/C:L/A:N/AC:L/RC:C/E:H/RL:O) Vendors: IBM Products: Maximo Asset Management Problem Types: Cross-Site Scripting Description: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195522. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/suppor
ion. IBM X-Force ID: 195522. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6454205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195522
CVE ID: CVE-2021-20375 State: PUBLISHED Published: 2021-10-07T18:05:45.376032Z Last Updated: 2024-09-16T17:23:43.800Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/C:N/A:N/UI:N/AV:N/AC:L/PR:L/I:H/RL:O/RC:C/E:U) Vendors: IBM Products: Sterling File Gateway Problem Types: Data Manipulation Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496803 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195567
CVE ID: CVE-2021-20376 State: PUBLISHED Published: 2021-10-07T18:05:46.999882Z Last Updated: 2024-09-17T03:38:21.912Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/I:N/AC:L/PR:L/AV:N/UI:N/A:N/C:L/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: Sterling File Gateway Problem Types: Obtain Information Description: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6496789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195568
CVE ID: CVE-2021-20377 State: PUBLISHED Published: 2021-09-23T16:05:30.579796Z Last Updated: 2024-09-16T20:21:36.250Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/A:N/C:L/AC:L/PR:H/I:N/S:U/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195569. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491125 - https://exchange.xforce.ibmcloud.com/vulnerab
Container: References: - https://www.ibm.com/support/pages/node/6491125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195569
CVE ID: CVE-2021-20378 State: PUBLISHED Published: 2021-07-07T16:30:26.982137Z Last Updated: 2024-09-16T20:06:34.621Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/I:L/UI:N/C:L/AC:L/S:U/AV:N/PR:L/A:L/E:U/RC:C/RL:O) Vendors: IBM Products: Guardium Data Encryption Problem Types: Gain Privileges Description: IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195709
CVE ID: CVE-2021-20379 State: PUBLISHED Published: 2021-07-07T16:30:28.694161Z Last Updated: 2024-09-16T17:32:50.711Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/I:N/UI:N/C:H/S:U/AC:H/A:N/AV:N/PR:N/RL:O/RC:C/E:U) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6469407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195711
CVE ID: CVE-2021-20380 State: PUBLISHED Published: 2021-06-03T14:45:10.319656Z Last Updated: 2024-09-16T16:39:06.873Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/C:L/I:N/AC:L/UI:N/PR:N/S:U/A:N/RL:O/RC:C/E:U) Vendors: IBM Products: Qradar Advisor Problem Types: Obtain Information Description: IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195712
CVE ID: CVE-2021-20385 State: PUBLISHED Published: 2021-05-24T13:55:37.990743Z Last Updated: 2024-09-16T16:32:51.559Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/I:H/S:C/AV:N/PR:H/C:H/UI:R/A:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Guardium Problem Types: Gain Privileges Description: IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 195766. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmc
es: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195766
CVE ID: CVE-2021-20386 State: PUBLISHED Published: 2021-05-24T13:55:38.631969Z Last Updated: 2024-09-16T19:56:54.084Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/PR:N/AV:N/C:L/UI:R/I:L/S:C/AC:L/RC:C/RL:O/E:H) Vendors: IBM Products: Security Guardium Problem Types: Cross-Site Scripting Description: IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195767. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https:/
dditional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195767
CVE ID: CVE-2021-20389 State: PUBLISHED Published: 2021-05-24T13:55:39.271777Z Last Updated: 2024-09-17T00:02:10.423Z Severity: MEDIUM (CVSS 5.1 CVSS:3.0/UI:N/C:H/PR:N/AV:L/A:N/AC:H/S:U/I:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Guardium Problem Types: Obtain Information Description: IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6455281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195770
CVE ID: CVE-2021-20391 State: PUBLISHED Published: 2021-05-14T16:15:35.235207Z Last Updated: 2024-09-16T16:17:45.724Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/C:L/A:N/AV:L/UI:N/AC:L/I:N/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/195999
CVE ID: CVE-2021-20392 State: PUBLISHED Published: 2021-05-14T16:15:35.913140Z Last Updated: 2024-09-16T22:14:55.813Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/I:L/AC:L/UI:R/PR:N/S:C/AV:N/C:L/A:N/RL:O/E:H/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453105 - https://e
itional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196000
CVE ID: CVE-2021-20393 State: PUBLISHED Published: 2021-05-14T16:15:36.593990Z Last Updated: 2024-09-16T19:09:30.564Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/C:L/A:N/S:U/PR:N/I:N/AC:L/UI:N/RC:C/RL:O/E:U) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453109 - https://exchange.xfo
lyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6453109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196001
CVE ID: CVE-2021-20396 State: PUBLISHED Published: 2021-06-11T14:25:18.831605Z Last Updated: 2024-09-17T01:22:06.329Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/C:L/AC:L/AV:L/PR:N/I:N/UI:N/A:N/E:U/RL:O/RC:C) Vendors: IBM Products: QRadar Analyst Workflow Problem Types: Obtain Information Description: IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 196009. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6462585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196009
CVE ID: CVE-2021-20397 State: PUBLISHED Published: 2021-05-05T15:45:34.710204Z Last Updated: 2024-09-16T23:01:04.398Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/A:N/S:C/I:L/PR:N/C:L/AV:N/UI:R/AC:L/RL:O/E:H/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Cross-Site Scripting Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449688 - https://exch
onal Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196017
CVE ID: CVE-2021-20399 State: PUBLISHED Published: 2021-07-27T11:25:15.517668Z Last Updated: 2024-09-17T03:34:04.313Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/PR:L/C:H/UI:N/AC:L/S:U/I:N/A:L/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196073. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6475263 - https://exchang
l Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6475263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196073
CVE ID: CVE-2021-20400 State: PUBLISHED Published: 2021-12-01T17:05:20.463735Z Last Updated: 2024-09-16T22:36:20.116Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/PR:N/AC:H/I:N/C:H/A:N/AV:N/UI:N/S:U/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6520488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196074
CVE ID: CVE-2021-20401 State: PUBLISHED Published: 2021-05-05T15:45:35.422587Z Last Updated: 2024-09-16T17:03:36.207Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:C/I:N/A:N/AV:L/C:H/PR:N/AC:H/UI:N/RL:O/E:U/RC:C) Vendors: IBM Products: QRadar SIEM Problem Types: Obtain Information Description: IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6449682 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/6449682 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196075
CVE ID: CVE-2021-20402 State: PUBLISHED Published: 2021-02-11T16:30:29.414291Z Last Updated: 2024-09-16T16:42:40.725Z Severity: LOW (CVSS 2.7 CVSS:3.0/I:N/AV:N/AC:L/A:N/S:U/PR:H/UI:N/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Information Queue Problem Types: Obtain Information Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196076. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414361 - ht
76. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196076
CVE ID: CVE-2021-20403 State: PUBLISHED Published: 2021-02-11T16:30:30.030679Z Last Updated: 2024-09-16T19:01:13.592Z Severity: LOW (CVSS 3.1 CVSS:3.0/AC:H/I:L/AV:N/A:N/UI:R/C:N/S:U/PR:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Verify Information Queue Problem Types: Gain Access Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196077
CVE ID: CVE-2021-20404 State: PUBLISHED Published: 2021-02-11T16:30:30.698135Z Last Updated: 2024-09-16T16:33:18.800Z Severity: LOW (CVSS 2.6 CVSS:3.0/A:L/UI:R/C:N/PR:N/S:U/I:N/AV:A/AC:H/E:U/RC:C/RL:O) Vendors: IBM Products: Security Verify Information Queue Problem Types: Denial of Service Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196078
CVE ID: CVE-2021-20405 State: PUBLISHED Published: 2021-02-11T16:30:31.367682Z Last Updated: 2024-09-16T20:26:35.782Z Severity: LOW (CVSS 3.1 CVSS:3.0/S:U/PR:N/C:N/UI:R/A:N/AV:N/I:L/AC:H/RL:O/E:U/RC:C) Vendors: IBM Products: Security Verify Information Queue Problem Types: Gain Access Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of output. IBM X-Force ID: 196183. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196183
CVE ID: CVE-2021-20406 State: PUBLISHED Published: 2021-02-12T16:35:27.889989Z Last Updated: 2024-09-16T20:07:44.180Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Information Queue Problem Types: CWE-326 Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196184. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196184
CVE ID: CVE-2021-20407 State: PUBLISHED Published: 2021-02-12T16:35:28.561974Z Last Updated: 2024-09-17T00:16:53.553Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Information Queue Problem Types: Obtain Information Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196185
CVE ID: CVE-2021-20408 State: PUBLISHED Published: 2021-02-12T16:35:29.239413Z Last Updated: 2024-09-16T22:56:54.849Z Severity: HIGH (CVSS 7.1 CVSS:3.0/S:U/AV:L/UI:N/I:H/C:H/PR:L/A:N/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Information Queue Problem Types: Obtain Information Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext cryptographic key. IBM X-Force ID: 198187. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196187
CVE ID: CVE-2021-20409 State: PUBLISHED Published: 2021-02-12T16:35:29.866577Z Last Updated: 2024-09-16T21:57:40.392Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Information Queue Problem Types: Obtain Information Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 196188. Additional Analyst Notes: - CVE Program Container: References: - https://www.i
iddle techniques. IBM X-Force ID: 196188. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196188
CVE ID: CVE-2021-20410 State: PUBLISHED Published: 2021-02-12T16:35:30.481737Z Last Updated: 2024-09-17T04:14:18.722Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/C:H/PR:L/UI:N/I:N/AC:H/A:N/S:U/AV:N/RL:O/E:U/RC:C) Vendors: IBM Products: Security Verify Information Queue Problem Types: Obtain Information Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196190
CVE ID: CVE-2021-20411 State: PUBLISHED Published: 2021-02-12T16:35:31.156763Z Last Updated: 2024-09-16T19:47:15.577Z Severity: HIGH (CVSS 7.5 CVSS:3.0/S:C/AV:A/PR:N/C:H/UI:R/I:H/A:N/AC:H/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Information Queue Problem Types: Gain Privileges Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196191
CVE ID: CVE-2021-20412 State: PUBLISHED Published: 2021-02-12T16:35:31.824808Z Last Updated: 2024-09-16T23:36:21.661Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/AV:N/C:H/PR:N/UI:N/I:N/AC:H/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Information Queue Problem Types: Obtain Information Description: IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 198192. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/641477
: 198192. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6414779 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196192
CVE ID: CVE-2021-20413 State: PUBLISHED Published: 2021-06-28T15:55:22.204995Z Last Updated: 2024-09-16T19:00:42.538Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/A:N/AC:L/I:N/PR:L/AV:N/S:U/UI:N/C:L/RC:C/E:U/RL:O) Vendors: IBM Products: Guardium Data Encryption Problem Types: Obtain Information Description: IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6444037 - https://exchange.xf
alyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6444037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/196212