CVE-2021-20411

High

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly…

ibm·CWE-669·Published 2021-02-12

CVSS

8.1

EPSS

0.00

KEV

Exploits

cve.orgen

190 chars

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191.

NVDen

190 chars

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191.

IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría permitir a un usuario suplantar a otro usuario en el sistema debido a una actualización incorrecta del identificador de sesión. IBM X-Force ID: 198191

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.8	6.5	4.9	AV:A/AC:L/Au:N/C:P/I:P/A:N
3.0	Primary	cve.org	7.5	—	—	CVSS:3.0/S:C/AV:A/PR:N/C:H/UI:R/I:H/A:N/AC:H/E:U/RL:O/RC:C
3.0	Primary	cve.org	7.5	—	—	CVSS:3.0/S:C/AV:A/PR:N/C:H/UI:R/I:H/A:N/AC:H/E:U/RL:O/RC:C
3.0	Secondary	NVD	7.5	1.2	5.8	CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
3.1	Primary	NVD	8.1	2.8	5.2	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N