Question 1

What is CVE-2021-29725?

Accepted Answer

CVE-2021-29725 is a high-severity software vulnerability (Resource exhaustion) with a CVSS score of 7.5. IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources causing a denial of service due to a resource leak.

Question 2

Is CVE-2021-29725 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

Question 3

What products does CVE-2021-29725 affect?

Accepted Answer

Tracked products affected include Solaris. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2021-29725?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2021-29725

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information