CVE-2021-29676

IBM Security Verify Privilege Vault (10.9.66 and prior releases) is vulnerable to a link-injection flaw. A remote attacker could lure a user into clicking a specially crafted URL, enabling cross-site scripting, cache poisoning, or session hijacking. Affected product facet: IBM Security Verify Pri...

Security Bulletin: Multiple Vulnerabilities Have Been Identified In IBM Security Verify Privilege Vault

Summary Multiple vulnerabilities identified in IBM Security Verify Privilege Vault previously known as IBM Security Secret Server has been addressed in the release 10.9.66 Vulnerability Details CVEID: CVE-2021-29676 DESCRIPTION: IBM Security Verify is vulnerable to link injection. By persuading a...

CVE-2021-29676

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site...