Read the docs
TI-2021-03809 Aliases CVE-2021-20576GHSA-8pr6-wcxr-5g9c

IBM Security Verify Access 20.07 could allow a remote attacker to send a specially…

Priority LOW 38Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash.

Why it matters now

EPSS 0.02476 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IBMSecurity Verify Access20.07—No fix listedCNA
  • Security Verify Access VendorIBM Affected 20.07 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:ibm:application_gateway:1.0:*:*:*:*:*:*:*1.0VulnerableIBM
cpe:2.3:a:ibm:security_verify_access:20.07:*:*:*:*:*:*:*20.07VulnerableIBM
  • cpe:2.3:a:ibm:application_gateway:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·IBM
  • cpe:2.3:a:ibm:security_verify_access:20.07:*:*:*:*:*:*:* Versions 20.07 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20576
  2. 2026-10-03 Alias added: GHSA-8pr6-wcxr-5g9c

References

Patch 1

  • TI-2024-19012 IBM Security Verify Access information disclosure CVSS 3.1CRITICAL 10.0
  • TI-2022-06701 Cross-site scripting in IBM Application Gateway CVSS 3.1MEDIUM 5.4
  • TI-2025-24826 Security vulnerabilities have been found in IBM Application Gateway CVSS 3.1MEDIUM 5.4
  • TI-2025-24825 Security vulnerabilities have been found in IBM Application Gateway CVSS 3.1MEDIUM 5.4
  • TI-2024-30660 IBM Application Gateway incorrect permission assignment CVSS 3.1MEDIUM 5.5
  • TI-2021-03808 Insecure storage of sensitive information in IBM Security Verify Access CVSS 3.1LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences