{"id":"CVE-2021-20410","state":"PUBLISHED","title":"IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM ","description":"IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190.","publishedAt":"2021-02-12T16:35:30.481Z","updatedAt":"2024-09-17T04:14:18.722Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/C:H/PR:L/UI:N/I:N/AC:H/A:N/S:U/AV:N/RL:O/E:U/RC:C","source":"ibm"},"assigner":"ibm","products":["IBM Security Verify Information Queue"],"affected":[{"vendor":"IBM","product":"Security Verify Information Queue","versions":[{"version":"1.0.6","status":"affected"},{"version":"1.0.7","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6414773","https://exchange.xforce.ibmcloud.com/vulnerabilities/196190"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:55.610Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/20xxx/CVE-2021-20410.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-20410","state":"PUBLISHED","datePublished":"2021-02-12T16:35:30.481Z","dateUpdated":"2024-09-17T04:14:18.722Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2020-12-17T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190."}],"affected":[{"vendor":"IBM","product":"Security Verify Information Queue","versions":[{"version":"1.0.6","status":"affected"},{"version":"1.0.7","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6414773","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/196190","name":"ibm-sviq-cve202120410-info-disc (196190)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.6,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/C:H/PR:L/UI:N/I:N/AC:H/A:N/S:U/AV:N/RL:O/E:U/RC:C","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2021-02-12T16:35:30.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2021-02-11T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2021-02-11T00:00:00","ID":"CVE-2021-20410","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Verify Information Queue","version":{"version_data":[{"version_value":"1.0.6"},{"version_value":"1.0.7"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"N","C":"H","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6414773","refsource":"CONFIRM","title":"IBM Security Bulletin 6414773 (Security Verify Information Queue)","url":"https://www.ibm.com/support/pages/node/6414773"},{"name":"ibm-sviq-cve202120410-info-disc (196190)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/196190"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6414773","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/196190","name":"ibm-sviq-cve202120410-info-disc (196190)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T17:37:24.344Z"}}]}}}