CVE-2021-29699

CVE-2021-29699 describes a critical arbitrary file upload vulnerability in IBM Security Verify Access Docker 10.0.0, allowing a remote privileged user to upload and execute dangerous file types. With a CVSS score of 6.8 (Medium), this vulnerability has a network attack vector, low attack complexity, and requires user interaction, potentially leading to high impact on confidentiality, integrity, and availability. While the EPSS score is low and there is no evidence of active exploitation, exploit code, or significant community discussion, organizations using affected products should still prioritize patching to mitigate potential risks.