Description

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.

Remediation

References

CVE-2021-20439

Related Vulnerabilities

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35413)

WordPress Improper Input Validation Vulnerability (CVE-2016-9263)

WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.3)

Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6417)

Craft CMS Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-68456)

Severity

High

Classification

CVE-2021-20439 CWE-522 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities