VULNERABILITY INTELLIGENCE

CVE-2021-20410

CVSS score5.3 MEDIUM
EPSS probability0.71%
CISA KEVNot currently listed
Published2021-02-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references