Skip to main content

Security Secret Server CVE-2021-20569

MEDIUM
Improper Input Validation (CWE-20)
2021-09-14 psirt@us.ibm.com
IBM Information Disclosure Security Secret Server
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 14, 2021 - 14:15 nvd
MEDIUM 5.3

DescriptionNVD

IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243.

AnalysisAI

IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243. Affected products include: Ibm Security Secret Server. Version information: up to 11.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Security Secret Server

View all
CVE-2020-4459 CRITICAL
9.8 Aug 04

IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses

CVE-2020-4840 MEDIUM
6.1 Dec 21

IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
CVE-2020-4323 MEDIUM
6.1 Jun 24

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. Rated medium severity (CVSS 6.1), this vulnerabil
CVE-2020-4841 MEDIUM
5.9 Dec 21

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to

CVE-2020-4413 MEDIUM
5.9 Jun 24

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information, caused by the failure to

CVE-2021-20582 MEDIUM
5.3 Sep 14

IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. Rated medium severity (CVSS 5.3),

CVE-2020-4342 MEDIUM
5.3 Jun 24

IBM Security Secret Server 10.7 could disclose sensitive information included in installation files to an unauthorized u
CVE-2020-4341 MEDIUM
5.3 Jun 24

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical

CVE-2020-4327 MEDIUM
5.3 Jun 24

IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical

CVE-2020-4842 MEDIUM
4.9 Dec 21

IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical

CVE-2021-20508 MEDIUM
4.3 Sep 14

IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed tech
CVE-2020-4843 MEDIUM
4.3 Dec 21

IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authen

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2021-20569 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy