CVE-2021-29699
Assigner: ibm
Published: 2021-07-13T00:00:00
State: PUBLISHED
affected: product: Security Verify Access Docker
vendor: IBM
versions: status: affected
version: 10.0.0
datePublic: 2021-07-13T00:00:00
descriptions: value: IBM Security Verify Access Docker 10.0.0 could allow a remote priviled user to upload arbitrary files with a dangerous file type that could be excuted by an user. IBM X-Force ID: 200600.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: UNPROVEN
integrityImpact: HIGH
privilegesRequired: HIGH
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 5.8
temporalSeverity: MEDIUM
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:A/A:H/AC:L/S:U/I:H/C:H/UI:R/PR:H/RC:C/E:U/RL:O
version: 3.0
problemTypes: descriptions: description: Gain Access
type: text