by Kastro
Paper/Archive/CVE-2021-29665

CVE-2021-29665

IBM Security Verify Access — IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a l…

EPSS 1%CVSS 9.0
critical.is priorityof 100
40
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 66.2.662 × 2013.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges.

Affected

ProductAffectedFixed inSource
Security Verify Access20.07–CNA

Scores by source

ibm (CNA)9.0CVSS:3.0/A:H/I:H/UI:N/AV:N/PR:N/C:H/S:C/AC:H/RC:C/E:U/RL:O

References

refibm.com/support/pages/node/6457315refexchange.xforce.ibmcloud.com/vulnerabilities/199399