Skip to content
OpenAdvisories
Medium WID-SEC-2023-1210 1 CVE

IBM Security Verify Access: Schwachstelle ermöglicht Denial of Service

Published May 14, 2023 · Updated May 14, 2023 · de-DE

Vendor: IBM Product: Security Verify Access Product: Security Verify Access < 10.0.5-ISS-ISVA-FP0001 Product: Security Verify Access 10.0.0 Product: Security Verify Access 10.0.1 Product: Security Verify Access 10.0.2 Product: Security Verify Access 10.0.3 Product: Security Verify Access 10.0.4 Product: Security Verify Access 10.0.5 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Security Verify Access ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungslösung.

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-25927

    IBM Security Verify Access denial of service

    IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system. IBM X-Force ID: 247635.

    IBM Security Verify Access

Revision history

  1. #1

    Initiale Fassung

References