CVE-2021-20434

IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346.

• CWE-522

• https://exchange.xforce.ibmcloud.com/vulnerabilities/196346Patch, VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6491651Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/196346Patch, VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6491651Patch, Vendor Advisory

Published

Sep 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20429IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could…5.3
• CVE-2021-2043Vulnerability in the PeopleSoft Enterprise PeopleTools produ…6.1
• CVE-2021-20430IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3…5.3
• CVE-2021-20431IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 do…6.5
• CVE-2021-20432IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-O…6.5
• CVE-2021-20433IBM Security Guardium 11.3 could allow a an authenticated us…6.5
• CVE-2021-20435IBM Security Verify Bridge 1.0.5.0 does not properly validat…5.5
• CVE-2021-20439IBM Security Access Manager 9.0 and IBM Security Verify Acce…7.5
• CVE-2021-2044Vulnerability in the PeopleSoft Enterprise FIN Payables prod…6.5
• CVE-2021-20440IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13…4.3
• CVE-2021-20441IBM Security Verify Bridge uses weaker than expected cryptog…5.9
• CVE-2021-20442IBM Security Verify Bridge contains hard-coded credentials, …7.5