CVE-2021-20511

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system

Medium · published July 15, 2021

CVSS v3.0
5.2
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 198300.

The record
Technical detail
CVSS v3.0
5.2 · MEDIUM
Vector
CVSS:3.0/AC:L/A:N/AV:A/PR:H/UI:N/C:H/S:U/I:L/RC:C/E:U/RL:O
CVSS v4.0
Not supplied
EPSS
0.01892 · 79.4th percentile
Published
2021-07-15T17:15Z
EPSS history
Timeline
  • 15 JUL 17:15Z
    IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system
    cvelistv5