Medium severity5.3NVD Advisory· Published Sep 14, 2021· Updated Jun 17, 2026

CVE-2021-20582

Description

IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 199328.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Security Secret Server
cpe:2.3:a:ibm:security_secret_server:*:*:*:*:*:*:*:*
Range: <11.0
IBM/IBM Security Secret Serverllm-fuzzy2 versions
<=11.0+ 1 more
- (no CPE)range: <=11.0
- (no CPE)range: 10.0

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/199328nvdVDB EntryVendor Advisory
www.ibm.com/support/pages/node/6488459nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000