IBM Security Secret Server vulnerabilities

CVEs per yearBy the year they were published

1. 202022
2. 20213

Newest CVEs

• CVE-2021-20582

  IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have…

  IBM · Security Secret Server

  Low3.7
• CVE-2021-20569

  IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243.

  IBM · Security Secret Server

  Medium5.3
• CVE-2021-20508

  IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…

  IBM · Security Secret Server

  Low2.7
• CVE-2020-4843

  IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user. IBM X-Force ID: 190048.

  IBM · Security Secret Server

  Medium6.3
• CVE-2020-4842

  IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the…

  IBM · Security Secret Server

  Low2.7
• CVE-2020-4841

  IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport…

  IBM · Security Secret Server

  Medium5.9
• CVE-2020-4840

  IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a…

  IBM · Security Secret Server

  High7.4
• CVE-2020-4340

  IBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to improper certificate validation. IBM X-Force ID: 178180.

  IBM · Security Secret Server

  Low3.1
• CVE-2020-4324

  IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID:…

  IBM · Security Secret Server

  Low3.5
• CVE-2020-4459

  IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication,…

  IBM · Security Secret Server

  Medium5.9