by Kastro
Paper/Archive/CVE-2021-39070

CVE-2021-39070

ibm — IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 78.6.786 × 2015.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. IBM X-Force ID: 215353.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

ibm (CNA)9.8CVSS:3.0/UI:N/PR:N/AC:L/A:H/I:H/AV:N/C:H/S:U/RL:O/RC:C/E:U
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refibm.com/support/pages/node/6552318refexchange.xforce.ibmcloud.com/vulnerabilities/215353