Skip to content
Sign in
5.9 Medium

CVE-2021-20409 IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information,…

Description

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 196188.

Affected products and versions

Product Affected versions Fixed in
Security Verify Information Queue 1.0 1.0.6 → 1.0.7 No fix stated

Other CVEs of Security Verify Information Queue

The 23 CVEs of Security Verify Information Queue →
CVE-2024-45671 IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 uses weaker than expected cryptographic… 5.9 Medium CVE-2024-45669 IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a remote user to cause a denial… 6.5 Medium CVE-2024-47120 IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their… 6.4 Medium CVE-2023-33835 IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information… 4.3 Medium
Track this CVE