Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-53331
HistoryJul 19, 2021 - 12:00 a.m.

IBM Security Access Manager Debug Information Disclosure Vulnerability (CNVD-2021-53331)

2021-07-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

IBM Security Access Manager is an application for information security management from IBM Corporation in the United States. The product enables access management control through integrated Web, mobile, and cloud-oriented devices.IBM Security Access Manager Docker is vulnerable to a debugging information disclosure vulnerability that stems from Security Access Manager Docker returning detailed technical error messages in the browser that could allow a remote attacker to access sensitive information. No detailed vulnerability details are available at this time.

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

Related for CNVD-2021-53331