Skip to content
OpenAdvisories
Medium WID-SEC-2023-2158 2 CVEs

IBM Security Verify Access: Mehrere Schwachstellen

Published Aug 23, 2023 · Updated Aug 23, 2023 · de-DE

Vendor: IBM Product: Security Verify Access OIDC Provider Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

Product

IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungslösung.

Vulnerabilities 2

  • High 7.5
    CVE-2022-43740

    IBM Security Verify Access denial of service

    IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 238921.

    IBM Security Verify Access
  • Medium 5.3
    CVE-2022-43868

    IBM Security Verify Access information disclosure

    IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445.

    IBM Security Verify Access

Revision history

  1. #1

    Initiale Fassung

References