CVE-2021-20508

IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…

Low · published September 14, 2021

CVSS v3.0
2.7
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199322.

The record
Technical detail
CVSS v3.0
2.7 · LOW
Vector
CVSS:3.0/UI:N/AC:L/A:N/PR:H/AV:N/S:U/I:N/C:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00974 · 61.7th percentile
Published
2021-09-14T13:25Z
EPSS history
Timeline
  • 14 SEP 13:25Z
    IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…
    cvelistv5