Security Bulletin: IBM Security Verify Information Queue discloses sensitive information in source code (CVE-2021-20407)

Summary The source code for a Node.js package used by IBM Security Verify Information Queue ISIQ includes the email address of one of the developers of the package. As of v10.0.0, ISIQ is now hiding this sensitive information. Vulnerability Details CVEID:CVE-2021-20407 DESCRIPTION: IBM Security...

CVE-2021-20407

IBM Security Verify Information Queue (ISIQ) versions 1.0.6 and 1.0.7 disclose sensitive information in source code, which could be used to facilitate further attacks. The IBM Security bulletin confirms affected product and versions and provides a remediation path: download and install the latest...

CVE-2021-20407 IBM Security Verify Information Queue information disclosure

IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185...