CVE-2021-20411

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session…

High · published February 12, 2021

CVSS v3.0
7.5
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/S:C/AV:A/PR:N/C:H/UI:R/I:H/A:N/AC:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00448 · 38.0th percentile
Published
2021-02-12T16:35Z
EPSS history
Timeline
  • 12 FEB 16:35Z
    IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session…
    cvelistv5