CVE-2021-20439: IBM Security Access Manager

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 stores user credentials in plain clear text which can be read by an unauthorized user.

Affected products

• IBM Security Access Manager: version 9.0 only
• IBM Security Verify Access: version 10.0.0 only

Published 2021-07-15. Last modified 2026-06-17.