4.6
Medium
CVE-2021-29676 IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection
Description
IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Verify Privilege Vault | 10.9.66 | No fix stated |