CVE-2021-29725 HIGH

CVE-2021-29725

Vendor Ibm
Product Secure External Authentication Server
Published July 15, 2021
Last update September 16, 2024

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AC:L/UI:N/PR:N/AV:N/S:U/I:N/C:N/A:H/RL:O/RC:C/E:U

What the vulnerability does

01Description

IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources causing a denial of service due to a resource leak.

Key dates

02Disclosure timeline

July 15, 2021 CVE published
September 16, 2024 Record updated