Skip to content
OpenAdvisories
Medium WID-SEC-2024-1936 1 CVE

IBM Security Verify Access: Schwachstelle ermöglicht Manipulation von Daten

Published Aug 27, 2024 · Updated Aug 27, 2024 · de-DE

Vendor: IBM Product: Security Verify Access

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Security Verify Access ausnutzen, um Daten zu manipulieren.

Product

IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungslösung.

Vulnerabilities 1

  • Medium 6.8
    CVE-2024-35133 Public exploit

    IBM Security Verify Access HTTP open redirect

    IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploi…

    IBM Security Verify Access Security Verify Access Docker

Revision history

  1. #1

    Initiale Fassung

References